grepmax 0.26.27 → 0.26.28

package/dist/commands/peek.js

@@ -45,17 +45,17 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.peek = void 0;
 const fs = __importStar(require("node:fs"));
 const commander_1 = require("commander");
+const graph_handler_1 = require("../lib/daemon/graph-handler");
 const callsites_1 = require("../lib/graph/callsites");
-const graph_builder_1 = require("../lib/graph/graph-builder");
 const vector_db_1 = require("../lib/store/vector-db");
 const agent_errors_1 = require("../lib/utils/agent-errors");
 const exit_1 = require("../lib/utils/exit");
-const filter_builder_1 = require("../lib/utils/filter-builder");
 const language_1 = require("../lib/utils/language");
 const path_containment_1 = require("../lib/utils/path-containment");
 const project_registry_1 = require("../lib/utils/project-registry");
 const project_root_1 = require("../lib/utils/project-root");
 const stale_hint_1 = require("../lib/utils/stale-hint");
+const store_access_1 = require("../lib/utils/store-access");
 const useColors = process.stdout.isTTY && !process.env.NO_COLOR;
 const style = {
     bold: (s) => (useColors ? `\x1b[1m${s}\x1b[22m` : s),
@@ -124,7 +124,7 @@ exports.peek = new commander_1.Command("peek")
     .option("--no-tests", "Suppress the tests footer")
     .action((symbol, opts) => __awaiter(void 0, void 0, void 0, function* () {
     var _a;
-    let vectorDb = null;
+    const local = { db: null };
     const root = (0, project_registry_1.resolveRootOrExit)(opts.root);
     if (root === null)
         return;
@@ -133,15 +133,35 @@ exports.peek = new commander_1.Command("peek")
         const projectRoot = (_a = (0, project_root_1.findProjectRoot)(root)) !== null && _a !== void 0 ? _a : root;
         (0, stale_hint_1.maybeWarnStaleChunker)(projectRoot, { agent: opts.agent });
         (0, stale_hint_1.maybeWarnStaleEmbedding)(projectRoot, { agent: opts.agent });
-        const paths = (0, project_root_1.ensureProjectPaths)(projectRoot);
-        vectorDb = new vector_db_1.VectorDB(paths.lancedbDir);
-        const { resolveScope, buildScopeWhere } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/scope-filter")));
+        const { resolveScope } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/scope-filter")));
         const scope = resolveScope({
             projectRoot,
             in: opts.in,
             exclude: opts.exclude,
         });
-        const scopeWhere = (cond) => buildScopeWhere(scope, cond);
+        // One round trip for everything peek needs out of the store: the
+        // defining chunks, the graph, the chunk metadata, and the tests footer.
+        // The signature below is read from the working tree by this process.
+        const store = yield (0, graph_handler_1.callGraphVerb)("graph.peek", {
+            projectRoot,
+            scope,
+            payload: {
+                target: symbol,
+                depth,
+                includeTests: opts.tests !== false,
+            },
+            render: (resp) => resp.peek,
+            inProcess: () => {
+                var _a;
+                (_a = local.db) !== null && _a !== void 0 ? _a : (local.db = new vector_db_1.VectorDB((0, project_root_1.ensureProjectPaths)(projectRoot).lancedbDir));
+                return (0, graph_handler_1.runGraphPeek)(local.db, {
+                    symbol,
+                    depth,
+                    scope,
+                    includeTests: opts.tests !== false,
+                });
+            },
+        });
         // Cross-language disambiguation: when the symbol is defined in 2+
         // languages, refuse to silently pick one. The graph builder otherwise
         // picks one chunk arbitrarily and lists callers from a different
@@ -150,17 +170,7 @@ exports.peek = new commander_1.Command("peek")
         // the first definition still wins, but the agent learns it guessed.
         let otherDefs = [];
         {
-            const tableForCheck = yield vectorDb.ensureTable();
-            const allDefs = yield tableForCheck
-                .query()
-                .select(["path", "start_line"])
-                .where(scopeWhere(`array_contains(defined_symbols, '${(0, filter_builder_1.escapeSqlString)(symbol)}')`))
-                .limit(20)
-                .toArray();
-            const chunks = allDefs.map((row) => ({
-                path: String(row.path || ""),
-                startLine: Number(row.start_line || 0),
-            }));
+            const chunks = store.defChunks;
             // Dedupe by file: split sub-chunks of one definition share a path,
             // while genuine ambiguity (same name defined elsewhere) crosses files.
             const distinct = new Map();
@@ -185,8 +195,7 @@ exports.peek = new commander_1.Command("peek")
                 return;
             }
         }
-        const graphBuilder = new graph_builder_1.GraphBuilder(vectorDb, scope.pathPrefix, scope.excludePrefixes);
-        const graph = yield graphBuilder.buildGraph(symbol);
+        const graph = store.graph;
         if (!graph.center) {
             console.log((0, agent_errors_1.symbolNotFoundLines)(symbol, {
                 agent: opts.agent,
@@ -198,24 +207,13 @@ exports.peek = new commander_1.Command("peek")
         }
         const center = graph.center;
         const rel = (p) => p.startsWith(projectRoot) ? p.slice(projectRoot.length + 1) : p;
-        // Get chunk metadata for is_exported and end_line
-        const table = yield vectorDb.ensureTable();
-        const metaRows = yield table
-            .query()
-            .select(["is_exported", "start_line", "end_line"])
-            .where(scopeWhere(`array_contains(defined_symbols, '${(0, filter_builder_1.escapeSqlString)(symbol)}')`))
-            .limit(1)
-            .toArray();
-        const exported = metaRows.length > 0 && Boolean(metaRows[0].is_exported);
-        const startLine = metaRows.length > 0
-            ? Number(metaRows[0].start_line || 0)
-            : center.line;
-        const endLine = metaRows.length > 0
-            ? Number(metaRows[0].end_line || 0)
-            : center.line;
+        // Chunk metadata for is_exported and end_line
+        const meta = store.meta;
+        const exported = (meta === null || meta === void 0 ? void 0 : meta.isExported) === true;
+        const startLine = meta ? meta.startLine : center.line;
+        const endLine = meta ? meta.endLine : center.line;
         let callerList;
-        if (depth > 1) {
-            const multiHop = yield graphBuilder.buildGraphMultiHop(symbol, depth);
+        if (depth > 1 && store.callerTree) {
             // Flatten caller tree
             const flat = [];
             function walkCallers(tree) {
@@ -229,7 +227,7 @@ exports.peek = new commander_1.Command("peek")
                     walkCallers(t.callers);
                 }
             }
-            walkCallers(multiHop.callerTree);
+            walkCallers(store.callerTree);
             callerList = flat;
         }
         else {
@@ -327,8 +325,8 @@ exports.peek = new commander_1.Command("peek")
                 console.log(`-> ... ${calleeList.length - MAX_CALLEES} more`);
             }
             if (opts.tests !== false) {
-                const { fetchTestsForFooter, renderTestsFooterAgent } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/tests-footer")));
-                const tests = yield fetchTestsForFooter(symbol, vectorDb, scope.pathPrefix, scope.excludePrefixes);
+                const { renderTestsFooterAgent } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/tests-footer")));
+                const tests = store.footerTests;
                 if (tests && tests.length > 0) {
                     for (const line of renderTestsFooterAgent(tests, projectRoot)) {
                         console.log(line);
@@ -396,8 +394,8 @@ exports.peek = new commander_1.Command("peek")
                 console.log(style.dim("No known callees."));
             }
             if (opts.tests !== false) {
-                const { fetchTestsForFooter, renderTestsFooterHuman } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/tests-footer")));
-                const tests = yield fetchTestsForFooter(symbol, vectorDb, scope.pathPrefix, scope.excludePrefixes);
+                const { renderTestsFooterHuman } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/tests-footer")));
+                const tests = store.footerTests;
                 if (tests && tests.length > 0) {
                     for (const line of renderTestsFooterHuman(tests, projectRoot)) {
                         console.log(line);
@@ -407,14 +405,18 @@ exports.peek = new commander_1.Command("peek")
         }
     }
     catch (error) {
-        const message = error instanceof Error ? error.message : "Unknown error";
-        console.error("Peek failed:", message);
-        process.exitCode = 1;
+        // A sandbox refusal is already one actionable line; a "Peek failed:"
+        // prefix would bury the settings key that fixes it.
+        if (!(0, store_access_1.reportStoreAccessRefusal)(error)) {
+            const message = error instanceof Error ? error.message : "Unknown error";
+            console.error("Peek failed:", message);
+            process.exitCode = 1;
+        }
     }
     finally {
-        if (vectorDb) {
+        if (local.db) {
             try {
-                yield vectorDb.close();
+                yield local.db.close();
             }
             catch (_b) { }
         }

package/dist/commands/project.js

@@ -45,118 +45,50 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.project = void 0;
 const path = __importStar(require("node:path"));
 const commander_1 = require("commander");
-const callsites_1 = require("../lib/graph/callsites");
-const vector_db_1 = require("../lib/store/vector-db");
-const arrow_1 = require("../lib/utils/arrow");
+const rows_handler_1 = require("../lib/daemon/rows-handler");
+const daemon_client_1 = require("../lib/utils/daemon-client");
 const exit_1 = require("../lib/utils/exit");
-const filter_builder_1 = require("../lib/utils/filter-builder");
 const project_registry_1 = require("../lib/utils/project-registry");
 const project_root_1 = require("../lib/utils/project-root");
+const store_access_1 = require("../lib/utils/store-access");
 exports.project = new commander_1.Command("project")
     .description("Show project overview — languages, structure, key symbols")
     .option("--root <dir>", "Project root (defaults to current directory)")
     .option("--agent", "Compact output for AI agents", false)
     .action((opts) => __awaiter(void 0, void 0, void 0, function* () {
     var _a, _b, _c;
-    let vectorDb = null;
     try {
         const resolvedRoot = (0, project_registry_1.resolveRootOrExit)(opts.root);
         if (resolvedRoot === null)
             return;
         const root = (_a = (0, project_root_1.findProjectRoot)(resolvedRoot)) !== null && _a !== void 0 ? _a : resolvedRoot;
-        const prefix = root.endsWith("/") ? root : `${root}/`;
         const projectName = path.basename(root);
         const paths = (0, project_root_1.ensureProjectPaths)(root);
-        vectorDb = new vector_db_1.VectorDB(paths.lancedbDir);
-        const table = yield vectorDb.ensureTable();
-        const rows = yield table
-            .query()
-            .select([
-            "path",
-            "role",
-            "is_exported",
-            "complexity",
-            "defined_symbols",
-            "referenced_symbols",
-        ])
-            .where((0, filter_builder_1.pathStartsWith)(prefix))
-            .limit(200000)
-            .toArray();
-        if (rows.length === 0) {
+        // The scan behind this overview reaches 200 000 rows with two symbol
+        // array columns; the daemon aggregates and ships the summary, never the
+        // rows (the platform project alone holds 266 753 chunks).
+        const overview = yield (0, store_access_1.withStoreRead)("project", {
+            daemon: () => (0, daemon_client_1.sendDaemonCommand)({ cmd: "rows.project", projectRoot: root }, { timeoutMs: 120000 }),
+            render: (resp) => resp.overview,
+            inProcess: () => (0, rows_handler_1.withLocalStore)(paths.lancedbDir, (deps) => (0, rows_handler_1.runProject)(deps, root)),
+            fallbackOnUnknownVerb: true,
+        });
+        if (overview.chunks === 0) {
             console.log(`No indexed data found for ${root}. Run: gmax index --path ${root}`);
             process.exitCode = 1;
             return;
         }
-        const files = new Set();
-        const extCounts = new Map();
-        const dirCounts = new Map();
-        const roleCounts = new Map();
-        const symbolRefs = new Map();
-        const definedInProject = new Set();
-        const entryPoints = [];
-        const seenEntryPoints = new Set();
-        for (const row of rows) {
-            const p = String(row.path || "");
-            const role = String(row.role || "IMPLEMENTATION");
-            const exported = Boolean(row.is_exported);
-            const complexity = Number(row.complexity || 0);
-            const defs = (0, arrow_1.toArr)(row.defined_symbols);
-            const refs = (0, arrow_1.toArr)(row.referenced_symbols);
-            files.add(p);
-            const ext = path.extname(p).toLowerCase() || path.basename(p);
-            extCounts.set(ext, (extCounts.get(ext) || 0) + 1);
-            const rel = p.startsWith(prefix) ? p.slice(prefix.length) : p;
-            const parts = rel.split("/");
-            const dir = parts.length > 2
-                ? `${parts.slice(0, 2).join("/")}/`
-                : parts.length > 1
-                    ? `${parts[0]}/`
-                    : "(root)";
-            if (!dirCounts.has(dir))
-                dirCounts.set(dir, { files: new Set(), chunks: 0 });
-            const dc = dirCounts.get(dir);
-            dc.files.add(p);
-            dc.chunks++;
-            roleCounts.set(role, (roleCounts.get(role) || 0) + 1);
-            for (const d of defs)
-                definedInProject.add(d);
-            for (const ref of refs)
-                symbolRefs.set(ref, (symbolRefs.get(ref) || 0) + 1);
-            if (exported &&
-                role === "ORCHESTRATION" &&
-                complexity >= 5 &&
-                defs.length > 0) {
-                const epKey = `${defs[0]}:${p}`;
-                if (!seenEntryPoints.has(epKey)) {
-                    seenEntryPoints.add(epKey);
-                    entryPoints.push({
-                        symbol: defs[0],
-                        path: p.startsWith(prefix) ? p.slice(prefix.length) : p,
-                    });
-                }
-            }
-        }
         const projects = (0, project_registry_1.listProjects)();
         const proj = projects.find((p) => p.root === root);
-        const extEntries = Array.from(extCounts.entries())
-            .sort((a, b) => b[1] - a[1])
-            .slice(0, 8);
-        // Key symbols must be the project's own: raw referenced_symbols counts
-        // are dominated by JS builtins (push, slice, map, …) which say nothing
-        // about the codebase.
-        const topSymbols = Array.from(symbolRefs.entries())
-            .filter(([s]) => definedInProject.has(s) && !(0, callsites_1.isBuiltinCallee)(s))
-            .sort((a, b) => b[1] - a[1])
-            .slice(0, 8);
+        const { chunks, files, extEntries, dirEntries, roleEntries, topSymbols, entryPoints, } = overview;
         if (opts.agent) {
             console.log(`name\t${projectName}`);
             console.log(`root\t${root}`);
-            console.log(`chunks\t${rows.length}`);
-            console.log(`files\t${files.size}`);
+            console.log(`chunks\t${chunks}`);
+            console.log(`files\t${files}`);
             console.log(`last_indexed\t${(_b = proj === null || proj === void 0 ? void 0 : proj.lastIndexed) !== null && _b !== void 0 ? _b : "unknown"}`);
             console.log(`languages\t${extEntries.map(([ext]) => ext).join(",")}`);
-            console.log(`top_dirs\t${Array.from(dirCounts.entries())
-                .sort((a, b) => b[1].chunks - a[1].chunks)
+            console.log(`top_dirs\t${dirEntries
                 .slice(0, 8)
                 .map(([d]) => d)
                 .join(",")}`);
@@ -164,24 +96,18 @@ exports.project = new commander_1.Command("project")
                 console.log(`key_symbols\t${topSymbols.map(([s]) => s).join(",")}`);
             }
             if (entryPoints.length > 0) {
-                console.log(`entry_points\t${entryPoints
-                    .slice(0, 10)
-                    .map((e) => e.symbol)
-                    .join(",")}`);
+                console.log(`entry_points\t${entryPoints.map((e) => e.symbol).join(",")}`);
             }
         }
         else {
             console.log(`Project: ${projectName} (${root})`);
-            console.log(`Last indexed: ${(_c = proj === null || proj === void 0 ? void 0 : proj.lastIndexed) !== null && _c !== void 0 ? _c : "unknown"} • ${rows.length} chunks • ${files.size} files\n`);
-            console.log(`Languages: ${extEntries.map(([ext, count]) => `${ext} (${Math.round((count / rows.length) * 100)}%)`).join(", ")}\n`);
+            console.log(`Last indexed: ${(_c = proj === null || proj === void 0 ? void 0 : proj.lastIndexed) !== null && _c !== void 0 ? _c : "unknown"} • ${chunks} chunks • ${files} files\n`);
+            console.log(`Languages: ${extEntries.map(([ext, count]) => `${ext} (${Math.round((count / chunks) * 100)}%)`).join(", ")}\n`);
             console.log("Directory structure:");
-            for (const [dir, data] of Array.from(dirCounts.entries())
-                .sort((a, b) => b[1].chunks - a[1].chunks)
-                .slice(0, 12)) {
-                console.log(`  ${dir.padEnd(25)} (${data.files.size} files, ${data.chunks} chunks)`);
+            for (const [dir, data] of dirEntries) {
+                console.log(`  ${dir.padEnd(25)} (${data.files} files, ${data.chunks} chunks)`);
             }
-            const roleEntries = Array.from(roleCounts.entries()).sort((a, b) => b[1] - a[1]);
-            console.log(`\nRoles: ${roleEntries.map(([r, c]) => `${Math.round((c / rows.length) * 100)}% ${r}`).join(", ")}\n`);
+            console.log(`\nRoles: ${roleEntries.map(([r, c]) => `${Math.round((c / chunks) * 100)}% ${r}`).join(", ")}\n`);
             if (topSymbols.length > 0) {
                 console.log("Key symbols (by reference count):");
                 for (const [sym, count] of topSymbols) {
@@ -190,24 +116,20 @@ exports.project = new commander_1.Command("project")
             }
             if (entryPoints.length > 0) {
                 console.log("\nEntry points (exported orchestration):");
-                for (const ep of entryPoints.slice(0, 10)) {
+                for (const ep of entryPoints) {
                     console.log(`  ${ep.symbol.padEnd(25)} ${ep.path}`);
                 }
             }
         }
     }
     catch (error) {
-        const msg = error instanceof Error ? error.message : "Unknown error";
-        console.error("Project summary failed:", msg);
-        process.exitCode = 1;
+        if (!(0, store_access_1.reportStoreAccessRefusal)(error)) {
+            const msg = error instanceof Error ? error.message : "Unknown error";
+            console.error("Project summary failed:", msg);
+            process.exitCode = 1;
+        }
     }
     finally {
-        if (vectorDb) {
-            try {
-                yield vectorDb.close();
-            }
-            catch (_d) { }
-        }
         yield (0, exit_1.gracefulExit)();
     }
 }));

package/dist/commands/related.js

@@ -45,16 +45,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.related = void 0;
 const path = __importStar(require("node:path"));
 const commander_1 = require("commander");
-const vector_db_1 = require("../lib/store/vector-db");
+const rows_handler_1 = require("../lib/daemon/rows-handler");
 const agent_errors_1 = require("../lib/utils/agent-errors");
-const arrow_1 = require("../lib/utils/arrow");
 const exit_1 = require("../lib/utils/exit");
-const filter_builder_1 = require("../lib/utils/filter-builder");
 const path_containment_1 = require("../lib/utils/path-containment");
 const project_registry_1 = require("../lib/utils/project-registry");
 const project_root_1 = require("../lib/utils/project-root");
-const query_timeout_1 = require("../lib/utils/query-timeout");
 const stale_hint_1 = require("../lib/utils/stale-hint");
+const store_access_1 = require("../lib/utils/store-access");
 exports.related = new commander_1.Command("related")
     .description("Find files related by shared symbol references")
     .argument("<file>", "File path relative to project root")
@@ -64,9 +62,8 @@ exports.related = new commander_1.Command("related")
     .option("--exclude <subpath>", "Exclude a sub-path of the project (repeatable)", (value, prev) => prev ? [...prev, value] : [value])
     .option("--agent", "Compact output for AI agents", false)
     .action((file, opts) => __awaiter(void 0, void 0, void 0, function* () {
-    var _a, _b;
+    var _a, _b, _c, _d;
     const limit = Math.min(Math.max(Number.parseInt(opts.limit || "10", 10), 1), 25);
-    let vectorDb = null;
     try {
         const root = (0, project_registry_1.resolveRootOrExit)(opts.root);
         if (root === null)
@@ -75,22 +72,27 @@ exports.related = new commander_1.Command("related")
         (0, stale_hint_1.maybeWarnStaleChunker)(projectRoot, { agent: opts.agent });
         (0, stale_hint_1.maybeWarnStaleEmbedding)(projectRoot, { agent: opts.agent });
         const paths = (0, project_root_1.ensureProjectPaths)(projectRoot);
-        vectorDb = new vector_db_1.VectorDB(paths.lancedbDir);
         const absPath = (_b = (0, path_containment_1.resolveContainedExistingPath)(projectRoot, file)) !== null && _b !== void 0 ? _b : path.resolve(projectRoot, file);
-        const table = yield vectorDb.ensureTable();
-        const { resolveScope, buildScopeWhere } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/scope-filter")));
+        const { resolveScope } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/scope-filter")));
         const scope = resolveScope({
             projectRoot,
             in: opts.in,
             exclude: opts.exclude,
         });
-        const pathScope = buildScopeWhere(scope);
-        const fileChunks = yield table
-            .query()
-            .select(["defined_symbols", "referenced_symbols"])
-            .where(`path = '${(0, filter_builder_1.escapeSqlString)(absPath)}'`)
-            .toArray();
-        if (fileChunks.length === 0) {
+        const locate = (matches, select, rowLimit, scoped = true) => (0, rows_handler_1.readRows)({
+            name: "related",
+            projectRoot,
+            lancedbDir: paths.lancedbDir,
+            scope,
+            select,
+            matches,
+            limit: rowLimit,
+            scoped,
+        });
+        // The file's own chunks. Unscoped, exactly as before: the file was named
+        // explicitly, so an --in that excludes it must not hide it from itself.
+        const [fileChunks] = yield locate([{ kind: "path", path: absPath }], ["defined_symbols", "referenced_symbols"], undefined, false);
+        if (!fileChunks || fileChunks.length === 0) {
             console.log((0, agent_errors_1.fileNotFoundLines)(file, { agent: opts.agent }).join("\n"));
             process.exitCode = 1;
             return;
@@ -98,22 +100,20 @@ exports.related = new commander_1.Command("related")
         const definedHere = new Set();
         const referencedHere = new Set();
         for (const chunk of fileChunks) {
-            for (const s of (0, arrow_1.toArr)(chunk.defined_symbols))
+            for (const s of (_c = chunk.defined_symbols) !== null && _c !== void 0 ? _c : [])
                 definedHere.add(s);
-            for (const s of (0, arrow_1.toArr)(chunk.referenced_symbols))
+            for (const s of (_d = chunk.referenced_symbols) !== null && _d !== void 0 ? _d : [])
                 referencedHere.add(s);
         }
-        // Dependencies
+        // Dependencies. One batched round trip instead of one per symbol — the
+        // daemon runs the same N selects, the socket carries one request.
+        const depSymbols = [...referencedHere].filter((s) => !definedHere.has(s));
+        const depResults = yield locate(depSymbols.map((symbol) => ({
+            kind: "definedSymbol",
+            symbol,
+        })), ["path"], 3);
         const depCounts = new Map();
-        for (const sym of referencedHere) {
-            if (definedHere.has(sym))
-                continue;
-            const rows = yield table
-                .query()
-                .select(["path"])
-                .where(`array_contains(defined_symbols, '${(0, filter_builder_1.escapeSqlString)(sym)}') AND ${pathScope}`)
-                .limit(3)
-                .toArray();
+        for (const rows of depResults) {
             for (const row of rows) {
                 const p = String(row.path || "");
                 if (p === absPath)
@@ -122,14 +122,12 @@ exports.related = new commander_1.Command("related")
             }
         }
         // Dependents
+        const revResults = yield locate([...definedHere].map((symbol) => ({
+            kind: "referencedSymbol",
+            symbol,
+        })), ["path"], 20);
         const revCounts = new Map();
-        for (const sym of definedHere) {
-            const rows = yield table
-                .query()
-                .select(["path"])
-                .where(`array_contains(referenced_symbols, '${(0, filter_builder_1.escapeSqlString)(sym)}') AND ${pathScope}`)
-                .limit(20)
-                .toArray();
+        for (const rows of revResults) {
             for (const row of rows) {
                 const p = String(row.path || "");
                 if (p === absPath)
@@ -170,15 +168,12 @@ exports.related = new commander_1.Command("related")
                 basenameRejected = true;
             }
             else {
-                // No .limit() here: LIKE + limit deadlocks in @lancedb 0.27.x when
-                // more rows match than the limit (verified). The loop below caps.
-                const rows = yield (0, query_timeout_1.withQueryTimeout)(table
-                    .query()
-                    .select(["path"])
-                    .where(`content LIKE '%${(0, filter_builder_1.escapeSqlString)(basename)}%' AND ${pathScope}`)
-                    .toArray(), `content LIKE %${basename}% (related mentions)`);
+                // Still no .limit(): LIKE + limit deadlocks in @lancedb when more
+                // rows match than the limit (verified). The verb caps the wire
+                // response at MAX_LOCATE_ROWS; the loop below caps the output.
+                const [rows] = yield locate([{ kind: "contentLike", value: basename }], ["path"], undefined);
                 const seen = new Set();
-                for (const row of rows) {
+                for (const row of rows !== null && rows !== void 0 ? rows : []) {
                     const p = String(row.path || "");
                     if (!p || p === absPath)
                         continue;
@@ -259,17 +254,13 @@ exports.related = new commander_1.Command("related")
         }
     }
     catch (error) {
-        const msg = error instanceof Error ? error.message : "Unknown error";
-        console.error("Related files failed:", msg);
-        process.exitCode = 1;
+        if (!(0, store_access_1.reportStoreAccessRefusal)(error)) {
+            const msg = error instanceof Error ? error.message : "Unknown error";
+            console.error("Related files failed:", msg);
+            process.exitCode = 1;
+        }
     }
     finally {
-        if (vectorDb) {
-            try {
-                yield vectorDb.close();
-            }
-            catch (_c) { }
-        }
         yield (0, exit_1.gracefulExit)();
     }
 }));

package/dist/commands/search-run.js

@@ -42,7 +42,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.shouldFallbackFromDaemonError = shouldFallbackFromDaemonError;
+exports.shouldFallbackFromDaemonError = void 0;
 exports.runSearch = runSearch;
 const path = __importStar(require("node:path"));
 const config_1 = require("../config");
@@ -55,10 +55,13 @@ const searcher_1 = require("../lib/search/searcher");
 const vector_db_1 = require("../lib/store/vector-db");
 const lock_1 = require("../lib/utils/lock");
 const project_registry_1 = require("../lib/utils/project-registry");
-const DAEMON_FALLBACK_ERRORS = new Set(["ENOENT", "ECONNREFUSED"]);
-function shouldFallbackFromDaemonError(error) {
-    return typeof error === "string" && DAEMON_FALLBACK_ERRORS.has(error);
-}
+const store_access_1 = require("../lib/utils/store-access");
+/**
+ * Re-exported from store-access.ts, where the errno policy now lives so every
+ * read command shares one table. Kept here because it has been this module's
+ * public predicate since v0.16.
+ */
+exports.shouldFallbackFromDaemonError = store_access_1.shouldFallbackFromDaemonError;
 /**
  * Acquire search results, picking the path: daemon-mediated first (ships the
  * query over IPC to the already-warm daemon), in-process fallback otherwise
@@ -116,7 +119,12 @@ function runSearch(params) {
                         precomputedGraph = resp.graph;
                         indexState = resp.indexState;
                     }
-                    else if (!shouldFallbackFromDaemonError(resp.error)) {
+                    else if ((0, store_access_1.classifyDaemonError)(resp.error) === "sandboxed") {
+                        // The sandbox blocked the socket. Naming the settings key beats
+                        // "Daemon search failed: EPERM", and the store must stay unopened.
+                        throw (0, store_access_1.refuseStoreAccess)("socket");
+                    }
+                    else if (!(0, exports.shouldFallbackFromDaemonError)(resp.error)) {
                         const detail = typeof resp.hint === "string"
                             ? `: ${resp.hint}`
                             : typeof resp.error === "string"
@@ -129,10 +137,15 @@ function runSearch(params) {
                     }
                 }
                 catch (err) {
+                    if ((0, store_access_1.isStoreAccessRefused)(err))
+                        throw err;
                     const code = err === null || err === void 0 ? void 0 : err.code;
+                    if ((0, store_access_1.classifyDaemonError)(code) === "sandboxed") {
+                        throw (0, store_access_1.refuseStoreAccess)("socket");
+                    }
                     if ((err instanceof Error &&
                         err.message.startsWith("Daemon search failed")) ||
-                        !shouldFallbackFromDaemonError(code)) {
+                        !(0, exports.shouldFallbackFromDaemonError)(code)) {
                         throw err;
                     }
                     if (process.env.GMAX_DEBUG === "1") {
@@ -263,7 +276,9 @@ function runSearch(params) {
                 }
                 catch (_d) { }
             }
-            throw e;
+            // A lease/LMDB denial from the in-process path becomes the same one-line
+            // refusal as a blocked socket, naming the filesystem settings key instead.
+            throw (0, store_access_1.asStoreAccessError)(e);
         }
     });
 }

package/dist/commands/search.js

@@ -54,6 +54,7 @@ const project_root_1 = require("../lib/utils/project-root");
 const scope_filter_1 = require("../lib/utils/scope-filter");
 const server_registry_1 = require("../lib/utils/server-registry");
 const stale_hint_1 = require("../lib/utils/stale-hint");
+const store_access_1 = require("../lib/utils/store-access");
 const search_output_1 = require("./search-output");
 const search_run_1 = require("./search-run");
 exports.search = new commander_1.Command("search")
@@ -331,8 +332,12 @@ Examples:
     catch (error) {
         const message = error instanceof Error ? error.message : "Unknown error";
         _searchError = message;
-        console.error("Search failed:", message);
-        process.exitCode = 1;
+        // A sandbox refusal is already one actionable line; printing it under a
+        // "Search failed:" prefix (and with exit 1) buries the fix.
+        if (!(0, store_access_1.reportStoreAccessRefusal)(error)) {
+            console.error("Search failed:", message);
+            process.exitCode = 1;
+        }
     }
     finally {
         // Best-effort query logging