grepmax 0.26.26 → 0.26.28

package/dist/commands/doctor.js

@@ -43,6 +43,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.doctor = void 0;
+exports.checkClaudeSandbox = checkClaudeSandbox;
 const fs = __importStar(require("node:fs"));
 const os = __importStar(require("node:os"));
 const path = __importStar(require("node:path"));
@@ -57,6 +58,7 @@ const mlx_hf_cache_1 = require("../lib/utils/mlx-hf-cache");
 const project_registry_1 = require("../lib/utils/project-registry");
 const project_root_1 = require("../lib/utils/project-root");
 const root_availability_1 = require("../lib/utils/root-availability");
+const store_access_1 = require("../lib/utils/store-access");
 function formatSize(bytes) {
     if (bytes < 1024)
         return `${bytes} B`;
@@ -84,12 +86,263 @@ function getDirectorySize(dirPath) {
     catch (_a) { }
     return totalSize;
 }
+/**
+ * The settings files Claude Code merges, lowest precedence first. Project
+ * settings override user settings, and `.local.json` overrides its sibling.
+ */
+function claudeSettingsFiles(home, projectRoot) {
+    const files = [
+        path.join(home, ".claude", "settings.json"),
+        path.join(home, ".claude", "settings.local.json"),
+    ];
+    if (projectRoot) {
+        files.push(path.join(projectRoot, ".claude", "settings.json"));
+        files.push(path.join(projectRoot, ".claude", "settings.local.json"));
+    }
+    return files;
+}
+function asObject(value) {
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function readSandboxScopes(files) {
+    var _a;
+    const scopes = [];
+    for (const file of files) {
+        let raw;
+        try {
+            raw = fs.readFileSync(file, "utf8");
+        }
+        catch (_b) {
+            continue; // absent (or unreadable) — that scope simply contributes nothing
+        }
+        try {
+            const sandbox = asObject((_a = asObject(JSON.parse(raw))) === null || _a === void 0 ? void 0 : _a.sandbox);
+            scopes.push({ path: file, sandbox });
+        }
+        catch (_c) {
+            scopes.push({ path: file, unreadable: true });
+        }
+    }
+    return scopes;
+}
+/** Matches a leading `$HOME` or `${HOME}`, whole segment only. */
+const HOME_VAR = /^\$\{?HOME\}?(?=$|\/)/;
+/** Expand `~`/`$HOME` and resolve relative entries against the project dir. */
+function expandSettingsPath(entry, home, base) {
+    let p = entry.trim();
+    if (p === "~")
+        p = home;
+    else if (p.startsWith("~/"))
+        p = path.join(home, p.slice(2));
+    // Function replacement: a `$` inside the home path must not be read as a
+    // capture reference.
+    else
+        p = p.replace(HOME_VAR, () => home);
+    return path.isAbsolute(p) ? path.normalize(p) : path.resolve(base, p);
+}
+function globToRegExp(pattern) {
+    let out = "";
+    for (let i = 0; i < pattern.length; i++) {
+        const ch = pattern[i];
+        if (ch === "*") {
+            if (pattern[i + 1] === "*") {
+                out += ".*";
+                i++;
+            }
+            else {
+                out += "[^/]*";
+            }
+            continue;
+        }
+        out += ch.replace(/[.+?^${}()|[\]\\]/g, "\\$&");
+    }
+    return new RegExp(`^${out}$`);
+}
+/** `~/.gmax/**` and `~/.gmax/*` both stand for the directory itself. */
+function stripGlobSuffix(p) {
+    return p.replace(/\/(?:\*\*\/\*|\*\*|\*)$/, "");
+}
+/** An allow entry covers a target when it is the target or contains it. */
+function coversPath(entry, target) {
+    const normalized = entry.replace(/\/+$/, "");
+    return target === normalized || target.startsWith(`${normalized}/`);
+}
+function entryAllows(entry, target, home, base) {
+    if (typeof entry !== "string" || entry.trim() === "")
+        return false;
+    const expanded = expandSettingsPath(entry, home, base);
+    if (expanded.includes("*")) {
+        if (globToRegExp(expanded).test(target))
+            return true;
+        return coversPath(stripGlobSuffix(expanded), target);
+    }
+    return coversPath(expanded, target);
+}
+/**
+ * Collapse the scopes into what Claude Code would actually apply: the
+ * highest-precedence definition of each leaf key wins. Union-ing the arrays
+ * instead would report a socket as allowed when a project override had in fact
+ * replaced the user-level list — a false OK, which is the worse failure here.
+ */
+function effectiveSandbox(scopes) {
+    const eff = {
+        present: false,
+        enabled: true,
+        allowAllUnixSockets: false,
+        allowUnixSockets: [],
+        allowWrite: [],
+    };
+    for (const scope of scopes) {
+        const sandbox = scope.sandbox;
+        if (!sandbox)
+            continue;
+        eff.present = true;
+        eff.source = scope.path;
+        // A `sandbox` block with no `enabled` key is on: the key only exists to
+        // turn it off, and the default flipped to on for macOS Bash.
+        if (typeof sandbox.enabled === "boolean")
+            eff.enabled = sandbox.enabled;
+        const network = asObject(sandbox.network);
+        if (network) {
+            if (typeof network.allowAllUnixSockets === "boolean")
+                eff.allowAllUnixSockets = network.allowAllUnixSockets;
+            if (Array.isArray(network.allowUnixSockets))
+                eff.allowUnixSockets = network.allowUnixSockets;
+        }
+        const filesystem = asObject(sandbox.filesystem);
+        if (filesystem && Array.isArray(filesystem.allowWrite))
+            eff.allowWrite = filesystem.allowWrite;
+    }
+    return eff;
+}
+function tildify(p, home) {
+    return p === home || p.startsWith(`${home}/`)
+        ? `~${p.slice(home.length)}`
+        : p;
+}
+/**
+ * Report whether a sandboxed Claude Code shell can reach the gmax store.
+ *
+ * Returns null when the machine has no Claude Code settings at all — gmax has
+ * nothing to say about a sandbox that is not configured anywhere.
+ */
+function checkClaudeSandbox(opts) {
+    var _a, _b, _c, _d, _e, _f;
+    const home = opts.home;
+    const socketPath = (_a = opts.socketPath) !== null && _a !== void 0 ? _a : config_1.PATHS.daemonSocket;
+    const storeDir = (_b = opts.storeDir) !== null && _b !== void 0 ? _b : config_1.PATHS.globalRoot;
+    const base = (_c = opts.projectRoot) !== null && _c !== void 0 ? _c : home;
+    const platform = (_d = opts.platform) !== null && _d !== void 0 ? _d : process.platform;
+    const scopes = readSandboxScopes(claudeSettingsFiles(home, opts.projectRoot));
+    if (scopes.length === 0)
+        return null;
+    const unreadable = scopes.filter((s) => s.unreadable).map((s) => s.path);
+    const eff = effectiveSandbox(scopes);
+    const parseNote = unreadable.length > 0
+        ? [
+            `could not parse ${unreadable.map((p) => tildify(p, home)).join(", ")} — checked the remaining scopes only`,
+        ]
+        : [];
+    if (!eff.present || !eff.enabled) {
+        // Nothing under ~/.gmax is at risk, so there is nothing to prescribe. Say
+        // so rather than staying silent: "not enabled" is the answer to the
+        // question anyone reaching for this check is actually asking.
+        if (!eff.present && unreadable.length > 0) {
+            return {
+                symbol: "INFO",
+                message: `Claude Code sandbox: ${parseNote[0]}`,
+                details: [],
+                agentRow: ["claude_sandbox", "enabled=unknown"].join("\t"),
+                enabled: false,
+                socketAllowed: true,
+                writeAllowed: true,
+            };
+        }
+        return {
+            symbol: "ok",
+            message: eff.present
+                ? "Claude Code sandbox: disabled in settings"
+                : "Claude Code sandbox: not enabled",
+            details: parseNote,
+            agentRow: ["claude_sandbox", "enabled=false"].join("\t"),
+            enabled: false,
+            socketAllowed: true,
+            writeAllowed: true,
+        };
+    }
+    const socketAllowed = eff.allowAllUnixSockets ||
+        eff.allowUnixSockets.some((e) => entryAllows(e, socketPath, home, base));
+    const writeAllowed = eff.allowWrite.some((e) => entryAllows(e, storeDir, home, base));
+    const agentRow = [
+        "claude_sandbox",
+        "enabled=true",
+        `socket=${socketAllowed ? (eff.allowAllUnixSockets ? "all" : "allowed") : "blocked"}`,
+        `write=${writeAllowed ? "allowed" : "blocked"}`,
+        `source=${(_e = eff.source) !== null && _e !== void 0 ? _e : "none"}`,
+    ].join("\t");
+    if (socketAllowed && writeAllowed) {
+        return {
+            symbol: "ok",
+            message: `Claude Code sandbox: enabled; daemon socket ${eff.allowAllUnixSockets ? "reachable (all Unix sockets allowed)" : "allowed"} and ${tildify(storeDir, home)} writable`,
+            details: parseNote,
+            agentRow,
+            enabled: true,
+            socketAllowed,
+            writeAllowed,
+        };
+    }
+    const blocked = [
+        socketAllowed ? null : "the daemon socket",
+        writeAllowed ? null : `writes to ${tildify(storeDir, home)}`,
+    ].filter(Boolean);
+    const details = [...parseNote];
+    if (!socketAllowed) {
+        details.push(store_access_1.SOCKET_DENIED_MESSAGE);
+        if (platform === "linux") {
+            details.push('on Linux the per-socket list does not exist — use "allowAllUnixSockets": true');
+        }
+    }
+    if (!writeAllowed) {
+        details.push(store_access_1.LEASE_DENIED_MESSAGE);
+        details.push("the write allowance only matters with no daemon running; with one up every read command goes over the socket");
+    }
+    // The snippet is the point of the WARN: the fix is one or two keys in a file
+    // gmax must not touch, so print exactly what to paste, carrying only the keys
+    // that are actually missing.
+    const snippetKeys = [];
+    if (!socketAllowed) {
+        snippetKeys.push(platform === "linux"
+            ? '  "network": { "allowAllUnixSockets": true }'
+            : '  "network": { "allowUnixSockets": ["~/.gmax/daemon.sock"] }');
+    }
+    if (!writeAllowed) {
+        snippetKeys.push('  "filesystem": { "allowWrite": ["~/.gmax"] }');
+    }
+    const target = (_f = eff.source) !== null && _f !== void 0 ? _f : path.join(home, ".claude", "settings.json");
+    details.push(`add to ${tildify(target, home)} (gmax doctor --fix never edits Claude Code settings):`);
+    details.push('"sandbox": {');
+    snippetKeys.forEach((line, i) => {
+        details.push(i < snippetKeys.length - 1 ? `${line},` : line);
+    });
+    details.push("}");
+    return {
+        symbol: "WARN",
+        message: `Claude Code sandbox: enabled, but ${blocked.join(" and ")} ${blocked.length > 1 ? "are" : "is"} blocked`,
+        details,
+        agentRow,
+        enabled: true,
+        socketAllowed,
+        writeAllowed,
+    };
+}
 exports.doctor = new commander_1.Command("doctor")
     .description("Check installation health, models, and index status")
     .option("--fix", "Auto-fix detected issues (compact, prune, remove stale locks)", false)
     .option("--agent", "Compact output for AI agents", false)
     .action((opts) => __awaiter(void 0, void 0, void 0, function* () {
-    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o;
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p;
     if (!opts.agent)
         console.log("gmax Doctor\n");
     const root = config_1.PATHS.globalRoot;
@@ -194,6 +447,23 @@ exports.doctor = new commander_1.Command("doctor")
         const summarizerStatus = (0, doctor_status_1.summarizerServerStatus)(summarizerUp);
         console.log(`${summarizerStatus.symbol}  ${summarizerStatus.message}`);
     }
+    // --- Claude Code sandbox ---
+    // Runs in both modes: an agent reading `--agent` output is exactly the
+    // caller most likely to be inside the sandbox this check is about.
+    const sandbox = checkClaudeSandbox({
+        home: os.homedir(),
+        projectRoot: (_f = (0, project_root_1.findProjectRoot)(process.cwd())) !== null && _f !== void 0 ? _f : process.cwd(),
+    });
+    if (sandbox) {
+        if (opts.agent) {
+            console.log(sandbox.agentRow);
+        }
+        else {
+            console.log(`${sandbox.symbol}  ${sandbox.message}`);
+            for (const line of sandbox.details)
+                console.log(`       ${line}`);
+        }
+    }
     // --- Index Health ---
     let needsOptimize = false;
     let staleLock = false;
@@ -301,7 +571,7 @@ exports.doctor = new commander_1.Command("doctor")
                         ? "LOW"
                         : "ok";
         }
-        catch (_p) { }
+        catch (_q) { }
         const staleChunkerProjects = projects.filter((p) => {
             var _a;
             return p.status === "indexed" &&
@@ -333,9 +603,9 @@ exports.doctor = new commander_1.Command("doctor")
                 `schema_dim=${physicalDim !== null && physicalDim !== void 0 ? physicalDim : "none"}`,
                 `schema_dim_ok=${schemaGap ? "false" : "true"}`,
                 `ann_index=${vectorIndex ? "present" : "absent"}`,
-                `ann_indexed=${(_f = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.numIndexedRows) !== null && _f !== void 0 ? _f : 0}`,
-                `ann_unindexed=${(_g = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.numUnindexedRows) !== null && _g !== void 0 ? _g : 0}`,
-                `ann_metric=${(_h = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.distanceType) !== null && _h !== void 0 ? _h : "none"}`,
+                `ann_indexed=${(_g = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.numIndexedRows) !== null && _g !== void 0 ? _g : 0}`,
+                `ann_unindexed=${(_h = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.numUnindexedRows) !== null && _h !== void 0 ? _h : 0}`,
+                `ann_metric=${(_j = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.distanceType) !== null && _j !== void 0 ? _j : "none"}`,
             ];
             console.log(fields.join("\t"));
             if (schemaGap) {
@@ -390,7 +660,7 @@ exports.doctor = new commander_1.Command("doctor")
                 console.log(`ok  Schema: vector table is ${physicalDim}d`);
             }
             if (vectorIndexStats) {
-                console.log(`ok  ANN: ${vectorIndexStats.numIndexedRows.toLocaleString()} indexed, ${vectorIndexStats.numUnindexedRows.toLocaleString()} unindexed, metric=${(_j = vectorIndexStats.distanceType) !== null && _j !== void 0 ? _j : "unknown"}`);
+                console.log(`ok  ANN: ${vectorIndexStats.numIndexedRows.toLocaleString()} indexed, ${vectorIndexStats.numUnindexedRows.toLocaleString()} unindexed, metric=${(_k = vectorIndexStats.distanceType) !== null && _k !== void 0 ? _k : "unknown"}`);
             }
             else {
                 console.log("INFO  ANN: vector index not built (set GMAX_ANN=1)");
@@ -519,7 +789,7 @@ exports.doctor = new commander_1.Command("doctor")
                         yield mc.close();
                     }
                 }
-                catch (_q) { }
+                catch (_r) { }
             }
         }
         // --fix auto-remediation
@@ -558,7 +828,7 @@ exports.doctor = new commander_1.Command("doctor")
                     // Only fall back when the daemon could not take it. A daemon that
                     // answered with a real failure should surface, not be retried here
                     // as a competing writer.
-                    const reason = String((_k = resp.error) !== null && _k !== void 0 ? _k : "");
+                    const reason = String((_l = resp.error) !== null && _l !== void 0 ? _l : "");
                     // Fall back ONLY when nothing is listening. A daemon that is merely
                     // too old ("unknown command") or busy ("timeout") is still a live
                     // writer on the store, so optimizing here would recreate the
@@ -609,7 +879,7 @@ exports.doctor = new commander_1.Command("doctor")
                         const done = yield sendStreamingCommand({ cmd: "index", root: p.root, reset: true }, () => { }).catch((e) => ({ ok: false, error: String(e) }));
                         if (done.ok &&
                             (!("degraded" in done) || done.degraded !== true)) {
-                            const chunks = (_l = done.indexed) !== null && _l !== void 0 ? _l : 0;
+                            const chunks = (_m = done.indexed) !== null && _m !== void 0 ? _m : 0;
                             if (opts.agent) {
                                 console.log(`stale_chunker_reindexed\tname=${name}\tchunks=${chunks}`);
                             }
@@ -621,7 +891,7 @@ exports.doctor = new commander_1.Command("doctor")
                         else if (!opts.agent) {
                             const degraded = "degraded" in done && done.degraded === true;
                             const reason = degraded
-                                ? `${(_m = ("scanErrors" in done ? done.scanErrors : 0)) !== null && _m !== void 0 ? _m : 0} scan errors, ${(_o = ("failedFiles" in done ? done.failedFiles : 0)) !== null && _o !== void 0 ? _o : 0} file failures`
+                                ? `${(_o = ("scanErrors" in done ? done.scanErrors : 0)) !== null && _o !== void 0 ? _o : 0} scan errors, ${(_p = ("failedFiles" in done ? done.failedFiles : 0)) !== null && _p !== void 0 ? _p : 0} file failures`
                                 : done.error;
                             console.log(`FAIL  ${name}: reindex failed (${reason})`);
                         }

package/dist/commands/extract.js

@@ -45,15 +45,17 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.extract = void 0;
 const fs = __importStar(require("node:fs"));
 const commander_1 = require("commander");
-const vector_db_1 = require("../lib/store/vector-db");
+const graph_handler_1 = require("../lib/daemon/graph-handler");
+const rows_handler_1 = require("../lib/daemon/rows-handler");
 const agent_errors_1 = require("../lib/utils/agent-errors");
 const exit_1 = require("../lib/utils/exit");
-const filter_builder_1 = require("../lib/utils/filter-builder");
 const import_extractor_1 = require("../lib/utils/import-extractor");
 const language_1 = require("../lib/utils/language");
 const path_containment_1 = require("../lib/utils/path-containment");
 const project_registry_1 = require("../lib/utils/project-registry");
 const project_root_1 = require("../lib/utils/project-root");
+const store_access_1 = require("../lib/utils/store-access");
+const tests_footer_1 = require("../lib/utils/tests-footer");
 const useColors = process.stdout.isTTY && !process.env.NO_COLOR;
 const style = {
     bold: (s) => (useColors ? `\x1b[1m${s}\x1b[22m` : s),
@@ -66,34 +68,14 @@ const ROLE_PRIORITY = {
     DEFINITION: 2,
     IMPLEMENTATION: 1,
 };
-function findSymbolChunks(db, whereClause) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const table = yield db.ensureTable();
-        const rows = yield table
-            .query()
-            .select([
-            "path",
-            "start_line",
-            "end_line",
-            "role",
-            "is_exported",
-            "defined_symbols",
-        ])
-            .where(whereClause)
-            .limit(10)
-            .toArray();
-        return rows.map((row) => ({
-            path: String(row.path || ""),
-            startLine: Number(row.start_line || 0),
-            endLine: Number(row.end_line || 0),
-            role: String(row.role || "IMPLEMENTATION"),
-            exported: Boolean(row.is_exported),
-            definedSymbols: Array.isArray(row.defined_symbols)
-                ? row.defined_symbols
-                : [],
-        }));
-    });
-}
+const CHUNK_COLUMNS = [
+    "path",
+    "start_line",
+    "end_line",
+    "role",
+    "is_exported",
+    "defined_symbols",
+];
 function pickBestMatch(chunks, symbol) {
     // Prefer chunks where the symbol is first in defined_symbols, then by role priority
     return chunks.sort((a, b) => {
@@ -104,6 +86,36 @@ function pickBestMatch(chunks, symbol) {
         return (ROLE_PRIORITY[b.role] || 0) - (ROLE_PRIORITY[a.role] || 0);
     })[0];
 }
+/**
+ * The tests footer: `findTests`, which walks the call graph — several LanceDB
+ * queries per hop — so it belongs on the daemon's warm store for the same
+ * reason the location lookup does.
+ *
+ * It rides `graph.tests`, not a footer-specific verb. WP-C shipped `rows.tests`
+ * for this one caller before `graph.tests` existed; the two wrapped the same
+ * library call with the same arguments, so the duplicate is gone.
+ *
+ * The footer's 1.5 s budget stays a *client-side* race (`withFooterTimeout`)
+ * rather than a daemon timeout: `null` means "the footer did not finish", and
+ * that has to include a slow round trip, not just a slow query. The verb's own
+ * 60 s socket timeout is the outer bound.
+ */
+function fetchTests(symbol, projectRoot, lancedbDir, scope, queryRoot) {
+    return __awaiter(this, void 0, void 0, function* () {
+        return (0, tests_footer_1.withFooterTimeout)((0, graph_handler_1.callGraphVerb)("graph.tests", {
+            projectRoot,
+            scope,
+            payload: { symbols: [symbol], depth: 1 },
+            render: (resp) => { var _a; return (_a = resp.hits) !== null && _a !== void 0 ? _a : []; },
+            inProcess: () => (0, rows_handler_1.withLocalStore)(lancedbDir, (deps) => (0, graph_handler_1.runGraphTests)(deps.vectorDb, {
+                symbols: [symbol],
+                queryRoot,
+                depth: 1,
+                excludePrefixes: scope.excludePrefixes,
+            })),
+        }));
+    });
+}
 exports.extract = new commander_1.Command("extract")
     .description("Extract full function/class body by symbol name")
     .argument("<symbol>", "The symbol to extract")
@@ -115,22 +127,44 @@ exports.extract = new commander_1.Command("extract")
     .option("--no-tests", "Suppress the tests footer")
     .action((symbol, opts) => __awaiter(void 0, void 0, void 0, function* () {
     var _a;
-    let vectorDb = null;
     const root = (0, project_registry_1.resolveRootOrExit)(opts.root);
     if (root === null)
         return;
     try {
         const projectRoot = (_a = (0, project_root_1.findProjectRoot)(root)) !== null && _a !== void 0 ? _a : root;
         const paths = (0, project_root_1.ensureProjectPaths)(projectRoot);
-        vectorDb = new vector_db_1.VectorDB(paths.lancedbDir);
-        const { resolveScope, buildScopeWhere } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/scope-filter")));
+        const { resolveScope } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/scope-filter")));
         const scope = resolveScope({
             projectRoot,
             in: opts.in,
             exclude: opts.exclude,
         });
-        const where = buildScopeWhere(scope, `array_contains(defined_symbols, '${(0, filter_builder_1.escapeSqlString)(symbol)}')`);
-        const indexedChunks = yield findSymbolChunks(vectorDb, where);
+        // Matches `queryRootFor` daemon-side, so both paths query the same root.
+        const queryRoot = opts.in && opts.in.length > 0
+            ? scope.pathPrefix.replace(/\/$/, "")
+            : projectRoot;
+        // Locations come from the daemon; the body is read here, from this
+        // process's own filesystem view.
+        const [indexedRows] = yield (0, rows_handler_1.readRows)({
+            name: "extract",
+            projectRoot,
+            lancedbDir: paths.lancedbDir,
+            scope,
+            select: CHUNK_COLUMNS,
+            matches: [{ kind: "definedSymbol", symbol }],
+            limit: 10,
+        });
+        const indexedChunks = (indexedRows !== null && indexedRows !== void 0 ? indexedRows : []).map((row) => {
+            var _a;
+            return ({
+                path: String(row.path || ""),
+                startLine: Number(row.start_line || 0),
+                endLine: Number(row.end_line || 0),
+                role: String(row.role || "IMPLEMENTATION"),
+                exported: Boolean(row.is_exported),
+                definedSymbols: (_a = row.defined_symbols) !== null && _a !== void 0 ? _a : [],
+            });
+        });
         const chunks = indexedChunks.flatMap((chunk) => {
             try {
                 return [
@@ -186,8 +220,8 @@ exports.extract = new commander_1.Command("extract")
             console.log(`${relPath}:${startLine + 1}-${endLine + 1}`);
             console.log(body.join("\n"));
             if (opts.tests !== false) {
-                const { fetchTestsForFooter, renderTestsFooterAgent } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/tests-footer")));
-                const tests = yield fetchTestsForFooter(symbol, vectorDb, scope.pathPrefix, scope.excludePrefixes);
+                const { renderTestsFooterAgent } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/tests-footer")));
+                const tests = yield fetchTests(symbol, projectRoot, paths.lancedbDir, scope, queryRoot);
                 if (tests && tests.length > 0) {
                     console.log("--- tests:");
                     for (const line of renderTestsFooterAgent(tests, projectRoot)) {
@@ -210,7 +244,7 @@ exports.extract = new commander_1.Command("extract")
             const lineNumWidth = String(endLine + 1).length;
             for (let i = 0; i < body.length; i++) {
                 const lineNum = String(startLine + 1 + i).padStart(lineNumWidth);
-                console.log(`${style.dim(`${lineNum}\u2502`)} ${body[i]}`);
+                console.log(`${style.dim(`${lineNum}│`)} ${body[i]}`);
             }
         }
         // Show other definitions if symbol exists in multiple files
@@ -227,8 +261,8 @@ exports.extract = new commander_1.Command("extract")
             console.log(`\n${style.dim(`Also defined in: ${otherLocs}`)}`);
         }
         if (!opts.agent && opts.tests !== false) {
-            const { fetchTestsForFooter, renderTestsFooterHuman } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/tests-footer")));
-            const tests = yield fetchTestsForFooter(symbol, vectorDb, scope.pathPrefix, scope.excludePrefixes);
+            const { renderTestsFooterHuman } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/tests-footer")));
+            const tests = yield fetchTests(symbol, projectRoot, paths.lancedbDir, scope, queryRoot);
             if (tests && tests.length > 0) {
                 for (const line of renderTestsFooterHuman(tests, projectRoot)) {
                     console.log(line);
@@ -237,17 +271,13 @@ exports.extract = new commander_1.Command("extract")
         }
     }
     catch (error) {
-        const message = error instanceof Error ? error.message : "Unknown error";
-        console.error("Extract failed:", message);
-        process.exitCode = 1;
+        if (!(0, store_access_1.reportStoreAccessRefusal)(error)) {
+            const message = error instanceof Error ? error.message : "Unknown error";
+            console.error("Extract failed:", message);
+            process.exitCode = 1;
+        }
     }
     finally {
-        if (vectorDb) {
-            try {
-                yield vectorDb.close();
-            }
-            catch (_b) { }
-        }
         yield (0, exit_1.gracefulExit)();
     }
 }));