grepmax 0.26.27 → 0.26.30

package/dist/commands/similar.js

@@ -44,16 +44,16 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.similar = void 0;
 const commander_1 = require("commander");
-const ann_config_1 = require("../lib/store/ann-config");
-const vector_db_1 = require("../lib/store/vector-db");
+const rows_handler_1 = require("../lib/daemon/rows-handler");
+const vector_handler_1 = require("../lib/daemon/vector-handler");
 const agent_errors_1 = require("../lib/utils/agent-errors");
-const arrow_1 = require("../lib/utils/arrow");
+const daemon_client_1 = require("../lib/utils/daemon-client");
 const exit_1 = require("../lib/utils/exit");
-const filter_builder_1 = require("../lib/utils/filter-builder");
 const path_containment_1 = require("../lib/utils/path-containment");
 const project_registry_1 = require("../lib/utils/project-registry");
 const project_root_1 = require("../lib/utils/project-root");
 const stale_hint_1 = require("../lib/utils/stale-hint");
+const store_access_1 = require("../lib/utils/store-access");
 exports.similar = new commander_1.Command("similar")
     .description("Find semantically similar code to a symbol or file")
     .argument("<target>", "Symbol name or file path")
@@ -67,7 +67,6 @@ exports.similar = new commander_1.Command("similar")
     var _a, _b, _c, _d, _e, _f, _g, _h, _j;
     const limit = Math.min(Math.max(Number.parseInt(opts.maxCount || "5", 10), 1), 25);
     const threshold = Number.parseFloat(opts.threshold || "0") || 0;
-    let vectorDb = null;
     try {
         const root = (0, project_registry_1.resolveRootOrExit)(opts.root);
         if (root === null)
@@ -76,78 +75,57 @@ exports.similar = new commander_1.Command("similar")
         (0, stale_hint_1.maybeWarnStaleChunker)(projectRoot, { agent: opts.agent });
         (0, stale_hint_1.maybeWarnStaleEmbedding)(projectRoot, { agent: opts.agent });
         const paths = (0, project_root_1.ensureProjectPaths)(projectRoot);
-        vectorDb = new vector_db_1.VectorDB(paths.lancedbDir);
-        const table = yield vectorDb.ensureTable();
         const isFile = target.includes("/") || (target.includes(".") && !target.includes(" "));
-        // Look up the source chunk's vector
-        let sourceRows;
-        if (isFile) {
-            const absPath = (0, path_containment_1.resolveContainedPath)(projectRoot, target, {
+        // Resolved here, not daemon-side: verifyExistingTarget looks at this
+        // process's filesystem, and a path outside the project must fail with the
+        // containment error the user expects before anything reaches the store.
+        const absPath = isFile
+            ? (0, path_containment_1.resolveContainedPath)(projectRoot, target, {
                 verifyExistingTarget: true,
-            });
-            sourceRows = yield table
-                .query()
-                .select(["vector", "path", "defined_symbols", "start_line"])
-                .where(`path = '${(0, filter_builder_1.escapeSqlString)(absPath)}'`)
-                .limit(1)
-                .toArray();
-        }
-        else {
-            sourceRows = yield table
-                .query()
-                .select(["vector", "path", "defined_symbols", "start_line"])
-                .where(`array_contains(defined_symbols, '${(0, filter_builder_1.escapeSqlString)(target)}') AND ${(0, filter_builder_1.pathStartsWith)(`${projectRoot}/`)}`)
-                .limit(1)
-                .toArray();
-        }
-        if (sourceRows.length === 0) {
+            })
+            : undefined;
+        const { resolveScope } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/scope-filter")));
+        const scope = resolveScope({
+            projectRoot,
+            in: opts.in,
+            exclude: opts.exclude,
+        });
+        // The source chunk's 384-float vector never leaves the store: the daemon
+        // looks it up, runs the vector search, and returns the ranked chunks.
+        const result = yield (0, store_access_1.withStoreRead)("similar", {
+            daemon: () => (0, daemon_client_1.sendDaemonCommand)({
+                cmd: "vector.similar",
+                projectRoot,
+                absPath,
+                symbol: isFile ? undefined : target,
+                scope: (0, rows_handler_1.scopeToWire)(scope),
+                limit,
+                threshold,
+            }, { timeoutMs: 60000 }),
+            render: (resp) => resp,
+            inProcess: () => (0, rows_handler_1.withLocalStore)(paths.lancedbDir, (deps) => (0, vector_handler_1.runSimilar)(deps, {
+                projectRoot,
+                absPath,
+                symbol: isFile ? undefined : target,
+                scope,
+                limit,
+                threshold,
+            })),
+            fallbackOnUnknownVerb: true,
+        });
+        if (result.status === "not-found") {
             console.log((isFile
                 ? (0, agent_errors_1.fileNotFoundLines)(target, { agent: opts.agent })
                 : (0, agent_errors_1.symbolNotFoundLines)(target, { agent: opts.agent })).join("\n"));
             process.exitCode = 1;
             return;
         }
-        const source = sourceRows[0];
-        const sourceVector = source.vector;
-        const sourcePath = String(source.path || "");
-        if (!sourceVector || sourceVector.length === 0) {
+        if (result.status === "no-vector") {
             console.log("Source chunk has no embedding vector.");
             process.exitCode = 1;
             return;
         }
-        // Vector search using the source chunk's embedding
-        const { resolveScope, buildScopeWhere } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/scope-filter")));
-        const scope = resolveScope({
-            projectRoot,
-            in: opts.in,
-            exclude: opts.exclude,
-        });
-        const pathScope = buildScopeWhere(scope);
-        const results = yield (0, ann_config_1.configureAnnVectorQuery)(table.vectorSearch(sourceVector))
-            .select([
-            "path",
-            "start_line",
-            "end_line",
-            "defined_symbols",
-            "role",
-            "content",
-            "_distance",
-        ])
-            .where(pathScope)
-            .limit(limit + 5) // fetch extra to account for self-filtering
-            .toArray();
-        // Filter out self and apply threshold
-        const filtered = results.filter((r) => {
-            if (r.path === sourcePath && r.start_line === source.start_line)
-                return false;
-            if (threshold > 0) {
-                // LanceDB returns L2 distance; convert to similarity
-                const sim = 1 / (1 + (r._distance || 0));
-                if (sim < threshold)
-                    return false;
-            }
-            return true;
-        });
+        const filtered = result.results;
         if (filtered.length === 0) {
             console.log(`No similar code found for ${target}.`);
             return;
@@ -155,7 +133,7 @@ exports.similar = new commander_1.Command("similar")
         const rel = (p) => p.startsWith(`${projectRoot}/`) ? p.slice(projectRoot.length + 1) : p;
         if (opts.agent) {
             for (const r of filtered.slice(0, limit)) {
-                const sym = (_c = (_b = (0, arrow_1.toArr)(r.defined_symbols)) === null || _b === void 0 ? void 0 : _b[0]) !== null && _c !== void 0 ? _c : "";
+                const sym = (_c = (_b = r.defined_symbols) === null || _b === void 0 ? void 0 : _b[0]) !== null && _c !== void 0 ? _c : "";
                 const line = ((_d = r.start_line) !== null && _d !== void 0 ? _d : 0) + 1;
                 const role = (r.role || "IMPL").slice(0, 4);
                 const dist = ((_e = r._distance) !== null && _e !== void 0 ? _e : 0).toFixed(3);
@@ -165,7 +143,7 @@ exports.similar = new commander_1.Command("similar")
         else {
             console.log(`Code similar to ${target}:\n`);
             for (const r of filtered.slice(0, limit)) {
-                const sym = (_g = (_f = (0, arrow_1.toArr)(r.defined_symbols)) === null || _f === void 0 ? void 0 : _f[0]) !== null && _g !== void 0 ? _g : "";
+                const sym = (_g = (_f = r.defined_symbols) === null || _f === void 0 ? void 0 : _f[0]) !== null && _g !== void 0 ? _g : "";
                 const line = ((_h = r.start_line) !== null && _h !== void 0 ? _h : 0) + 1;
                 const role = r.role || "IMPLEMENTATION";
                 const dist = ((_j = r._distance) !== null && _j !== void 0 ? _j : 0).toFixed(3);
@@ -174,17 +152,13 @@ exports.similar = new commander_1.Command("similar")
         }
     }
     catch (error) {
-        const msg = error instanceof Error ? error.message : "Unknown error";
-        console.error("Similar search failed:", msg);
-        process.exitCode = 1;
+        if (!(0, store_access_1.reportStoreAccessRefusal)(error)) {
+            const msg = error instanceof Error ? error.message : "Unknown error";
+            console.error("Similar search failed:", msg);
+            process.exitCode = 1;
+        }
     }
     finally {
-        if (vectorDb) {
-            try {
-                yield vectorDb.close();
-            }
-            catch (_k) { }
-        }
         yield (0, exit_1.gracefulExit)();
     }
 }));

package/dist/commands/skeleton.js

@@ -54,19 +54,18 @@ exports.skeleton = void 0;
 const fs = __importStar(require("node:fs"));
 const commander_1 = require("commander");
 const config_1 = require("../config");
+const rows_handler_1 = require("../lib/daemon/rows-handler");
 const sync_helpers_1 = require("../lib/index/sync-helpers");
-const syncer_1 = require("../lib/index/syncer");
 const searcher_1 = require("../lib/search/searcher");
 const setup_helpers_1 = require("../lib/setup/setup-helpers");
-const retriever_1 = require("../lib/skeleton/retriever");
 const skeletonizer_1 = require("../lib/skeleton/skeletonizer");
-const vector_db_1 = require("../lib/store/vector-db");
+const daemon_client_1 = require("../lib/utils/daemon-client");
 const exit_1 = require("../lib/utils/exit");
 const file_utils_1 = require("../lib/utils/file-utils");
-const filter_builder_1 = require("../lib/utils/filter-builder");
 const path_containment_1 = require("../lib/utils/path-containment");
 const project_registry_1 = require("../lib/utils/project-registry");
 const project_root_1 = require("../lib/utils/project-root");
+const store_access_1 = require("../lib/utils/store-access");
 /**
  * Check if target looks like a file path.
  */
@@ -83,34 +82,115 @@ function isSymbolLike(target) {
     return /^[A-Za-z_][A-Za-z0-9_]*$/.test(target) && !target.includes(" ");
 }
 /**
- * Find a file by symbol name in the index.
+ * `--sync`. With a daemon up this is the existing `ensure-project` streaming
+ * verb — the daemon already owns first-run indexing and is the only process
+ * that should be writing to the store. `initialSync` runs here only when no
+ * daemon is listening.
  */
-function findFileBySymbol(symbol, db, projectRoot) {
+function syncIndex(projectRoot, lancedbDir) {
     return __awaiter(this, void 0, void 0, function* () {
-        try {
-            const table = yield db.ensureTable();
-            // Search for files that define this symbol
-            const results = yield table
-                .search(symbol)
-                .where((0, filter_builder_1.pathStartsWith)(`${projectRoot}/`))
-                .limit(10)
-                .toArray();
-            // Find a result where this symbol is defined
-            for (const result of results) {
-                const defined = result.defined_symbols;
-                if (defined === null || defined === void 0 ? void 0 : defined.includes(symbol)) {
-                    return result.path;
+        const { spinner, onProgress } = (0, sync_helpers_1.createIndexingSpinner)(projectRoot, "Syncing...", { verbose: false });
+        yield (0, store_access_1.withStoreRead)("skeleton sync", {
+            daemon: () => __awaiter(this, void 0, void 0, function* () {
+                var _a;
+                try {
+                    const done = yield (0, daemon_client_1.sendStreamingCommand)({ cmd: "ensure-project", root: projectRoot }, (msg) => {
+                        var _a, _b, _c;
+                        return onProgress({
+                            processed: Number((_a = msg.processed) !== null && _a !== void 0 ? _a : 0),
+                            total: Number((_b = msg.total) !== null && _b !== void 0 ? _b : 0),
+                            indexed: Number((_c = msg.indexed) !== null && _c !== void 0 ? _c : 0),
+                            filePath: typeof msg.filePath === "string" ? msg.filePath : "",
+                        });
+                    });
+                    return Object.assign(Object.assign({}, done), { ok: done.ok !== false });
                 }
-            }
-            // Fallback: just return the first match's file
-            if (results.length > 0) {
-                return results[0].path;
-            }
-            return null;
-        }
-        catch (_a) {
-            return null;
-        }
+                catch (err) {
+                    // sendStreamingCommand rejects with the socket errno as the message,
+                    // which is exactly what the access policy classifies on.
+                    return {
+                        ok: false,
+                        error: (_a = err === null || err === void 0 ? void 0 : err.code) !== null && _a !== void 0 ? _a : err === null || err === void 0 ? void 0 : err.message,
+                    };
+                }
+            }),
+            render: () => {
+                spinner.succeed("Sync complete");
+            },
+            inProcess: () => __awaiter(this, void 0, void 0, function* () {
+                const { initialSync } = yield Promise.resolve().then(() => __importStar(require("../lib/index/syncer")));
+                const result = yield initialSync({ projectRoot, onProgress });
+                if (result.degraded) {
+                    spinner.warn(`Sync incomplete: ${result.scanErrors} scan error(s), ${result.failedFiles} file failure(s)`);
+                    return;
+                }
+                const prefix = projectRoot.endsWith("/")
+                    ? projectRoot
+                    : `${projectRoot}/`;
+                const chunkCount = yield (0, rows_handler_1.withLocalStore)(lancedbDir, (deps) => deps.vectorDb.countRowsForPath(prefix));
+                (0, project_registry_1.stampProjectFullSync)({
+                    root: projectRoot,
+                    generation: result.generation,
+                    embedMode: result.embedMode,
+                    chunkCount,
+                    chunkerVersion: config_1.CONFIG.CHUNKER_VERSION,
+                    expectedFingerprint: result.registryExpectation.embeddingFingerprint,
+                    expectedRebuildId: result.registryExpectation.rebuildId,
+                });
+                spinner.succeed("Sync complete");
+            }),
+        });
+    });
+}
+/**
+ * The stored skeleton for a file, and/or the file that defines a symbol. One
+ * verb covers both because symbol mode always follows the lookup with the
+ * skeleton fetch.
+ */
+function lookupSkeleton(projectRoot, lancedbDir, req) {
+    return __awaiter(this, void 0, void 0, function* () {
+        return (0, store_access_1.withStoreRead)("skeleton", {
+            daemon: () => (0, daemon_client_1.sendDaemonCommand)({
+                cmd: "rows.skeleton",
+                projectRoot,
+                path: req.path,
+                symbol: req.symbol,
+            }, { timeoutMs: 30000 }),
+            render: (resp) => {
+                var _a, _b;
+                return ({
+                    path: ((_a = resp.path) !== null && _a !== void 0 ? _a : null),
+                    skeleton: ((_b = resp.skeleton) !== null && _b !== void 0 ? _b : null),
+                });
+            },
+            inProcess: () => (0, rows_handler_1.withLocalStore)(lancedbDir, (deps) => (0, rows_handler_1.runSkeleton)(deps, Object.assign({ projectRoot }, req))),
+            fallbackOnUnknownVerb: true,
+        });
+    });
+}
+/**
+ * Query mode's search. Routed through the daemon's `search` verb so the
+ * Searcher — and with it the PageRank cache under ~/.gmax/pagerank/ — stays in
+ * one process.
+ */
+function searchFiles(projectRoot, lancedbDir, query, limit) {
+    return __awaiter(this, void 0, void 0, function* () {
+        return (0, store_access_1.withStoreRead)("skeleton search", {
+            daemon: () => (0, daemon_client_1.sendDaemonCommand)({
+                cmd: "search",
+                projectRoot,
+                query,
+                limit,
+                pathPrefix: projectRoot,
+            }, { timeoutMs: 60000 }),
+            render: (resp) => { var _a; return ((_a = resp.data) !== null && _a !== void 0 ? _a : []); },
+            inProcess: () => (0, rows_handler_1.withLocalStore)(lancedbDir, (deps) => __awaiter(this, void 0, void 0, function* () {
+                var _a;
+                const searcher = new searcher_1.Searcher(deps.vectorDb);
+                const results = yield searcher.search(query, limit, {}, {}, `${projectRoot}/`);
+                return (_a = results.data) !== null && _a !== void 0 ? _a : [];
+            })),
+        });
     });
 }
 exports.skeleton = new commander_1.Command("skeleton")
@@ -129,36 +209,15 @@ Examples:
 `)
     .action((target, options, _cmd) => __awaiter(void 0, void 0, void 0, function* () {
     var _a, _b, _c, _d, _e;
-    let vectorDb = null;
     try {
         // Initialize
         yield (0, setup_helpers_1.ensureSetup)();
         const projectRoot = (_a = (0, project_root_1.findProjectRoot)(process.cwd())) !== null && _a !== void 0 ? _a : process.cwd();
         const paths = (0, project_root_1.ensureProjectPaths)(projectRoot);
-        vectorDb = new vector_db_1.VectorDB(paths.lancedbDir);
+        const lancedbDir = paths.lancedbDir;
         // Sync if requested
         if (options.sync) {
-            const { spinner, onProgress } = (0, sync_helpers_1.createIndexingSpinner)(projectRoot, "Syncing...", { verbose: false });
-            const result = yield (0, syncer_1.initialSync)({ projectRoot, onProgress });
-            if (result.degraded) {
-                spinner.warn(`Sync incomplete: ${result.scanErrors} scan error(s), ${result.failedFiles} file failure(s)`);
-            }
-            else {
-                const prefix = projectRoot.endsWith("/")
-                    ? projectRoot
-                    : `${projectRoot}/`;
-                const chunkCount = yield vectorDb.countRowsForPath(prefix);
-                (0, project_registry_1.stampProjectFullSync)({
-                    root: projectRoot,
-                    generation: result.generation,
-                    embedMode: result.embedMode,
-                    chunkCount,
-                    chunkerVersion: config_1.CONFIG.CHUNKER_VERSION,
-                    expectedFingerprint: result.registryExpectation.embeddingFingerprint,
-                    expectedRebuildId: result.registryExpectation.rebuildId,
-                });
-                spinner.succeed("Sync complete");
-            }
+            yield syncIndex(projectRoot, lancedbDir);
         }
         // Initialize skeletonizer
         const skeletonizer = new skeletonizer_1.Skeletonizer();
@@ -216,17 +275,15 @@ Examples:
                 process.exitCode = 1;
                 return;
             }
-            if (vectorDb) {
-                // Use absolute path for DB lookup (centralized index stores absolute paths)
-                const cached = yield (0, retriever_1.getStoredSkeleton)(vectorDb, filePath);
-                if (cached) {
-                    outputResult({
-                        success: true,
-                        skeleton: cached,
-                        tokenEstimate: Math.ceil(cached.length / 4),
-                    }, options);
-                    return;
-                }
+            // Use absolute path for DB lookup (centralized index stores absolute paths)
+            const cached = (yield lookupSkeleton(projectRoot, lancedbDir, { path: filePath })).skeleton;
+            if (cached) {
+                outputResult({
+                    success: true,
+                    skeleton: cached,
+                    tokenEstimate: Math.ceil(cached.length / 4),
+                }, options);
+                return;
             }
             const content = (0, file_utils_1.readContainedTextFileSync)(projectRoot, filePath);
             const result = yield skeletonizer.skeletonizeFile(filePath, content, skeletonOpts);
@@ -234,15 +291,17 @@ Examples:
         }
         else if (isSymbolLike(target) && !target.includes(" ")) {
             // === SYMBOL MODE ===
-            const filePath = yield findFileBySymbol(target, vectorDb, projectRoot);
-            if (!filePath) {
+            const found = yield lookupSkeleton(projectRoot, lancedbDir, {
+                symbol: target,
+            });
+            if (!found.path) {
                 console.error(`Symbol not found in index: ${target}`);
                 console.error("Try running 'gmax index' first or use a search query.");
                 process.exitCode = 1;
                 return;
             }
             // filePath from DB is absolute (centralized index)
-            const absolutePath = (0, path_containment_1.resolveContainedPath)(projectRoot, filePath, {
+            const absolutePath = (0, path_containment_1.resolveContainedPath)(projectRoot, found.path, {
                 verifyExistingTarget: true,
             });
             if (!fs.existsSync(absolutePath)) {
@@ -250,7 +309,7 @@ Examples:
                 process.exitCode = 1;
                 return;
             }
-            const cached = yield (0, retriever_1.getStoredSkeleton)(vectorDb, absolutePath);
+            const cached = found.skeleton;
             if (cached) {
                 outputResult({
                     success: true,
@@ -265,10 +324,9 @@ Examples:
         }
         else {
             // === QUERY MODE ===
-            const searcher = new searcher_1.Searcher(vectorDb);
             const limit = Math.min(Number.parseInt(options.limit, 10) || 3, 10);
-            const searchResults = yield searcher.search(target, limit, {}, {}, `${projectRoot}/`);
-            if (!searchResults.data || searchResults.data.length === 0) {
+            const searchData = yield searchFiles(projectRoot, lancedbDir, target, limit);
+            if (searchData.length === 0) {
                 console.error(`No results found for: ${target}`);
                 process.exitCode = 1;
                 return;
@@ -276,7 +334,7 @@ Examples:
             // Get unique file paths from results
             const seenPaths = new Set();
             const filePaths = [];
-            for (const result of searchResults.data) {
+            for (const result of searchData) {
                 const resultPath = (_e = result.metadata) === null || _e === void 0 ? void 0 : _e.path;
                 if (resultPath && !seenPaths.has(resultPath)) {
                     seenPaths.add(resultPath);
@@ -314,7 +372,9 @@ Examples:
                     continue;
                 }
                 // Try cache first
-                const cached = yield (0, retriever_1.getStoredSkeleton)(vectorDb, absolutePath);
+                const cached = (yield lookupSkeleton(projectRoot, lancedbDir, {
+                    path: absolutePath,
+                })).skeleton;
                 if (cached) {
                     results.push({
                         file: filePath,
@@ -345,19 +405,13 @@ Examples:
         }
     }
     catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        console.error("Error:", message);
-        process.exitCode = 1;
+        if (!(0, store_access_1.reportStoreAccessRefusal)(error)) {
+            const message = error instanceof Error ? error.message : String(error);
+            console.error("Error:", message);
+            process.exitCode = 1;
+        }
     }
     finally {
-        if (vectorDb) {
-            try {
-                yield vectorDb.close();
-            }
-            catch (_g) {
-                // Ignore close errors
-            }
-        }
         const code = typeof process.exitCode === "number" ? process.exitCode : 0;
         yield (0, exit_1.gracefulExit)(code);
     }

package/dist/commands/status.js

@@ -48,12 +48,87 @@ const commander_1 = require("commander");
 const config_1 = require("../config");
 const embedding_status_1 = require("../lib/index/embedding-status");
 const index_config_1 = require("../lib/index/index-config");
+const daemon_client_1 = require("../lib/utils/daemon-client");
 const exit_1 = require("../lib/utils/exit");
 const filter_builder_1 = require("../lib/utils/filter-builder");
 const lock_1 = require("../lib/utils/lock");
 const project_registry_1 = require("../lib/utils/project-registry");
 const project_root_1 = require("../lib/utils/project-root");
+const store_access_1 = require("../lib/utils/store-access");
 const watcher_store_1 = require("../lib/utils/watcher-store");
+/**
+ * Ask the daemon first. Both verbs already exist, so this works against an
+ * unrestarted daemon, and it is what makes `status` survive a sandbox that
+ * denies writes to ~/.gmax: `listWatchers()` opens LMDB, which needs its lock
+ * file even to read, and died with "Attempting to setup locks" before the
+ * command ever reached the store.
+ *
+ * The in-process branch is entered only when nothing is listening on the
+ * socket. A lease/LMDB denial there is converted by withStoreRead into the
+ * one-line filesystem hint.
+ */
+function loadStatusView(projects) {
+    return __awaiter(this, void 0, void 0, function* () {
+        return (0, store_access_1.withStoreRead)("status", {
+            daemon: () => (0, daemon_client_1.sendDaemonCommand)({ cmd: "status" }),
+            render: (resp) => __awaiter(this, void 0, void 0, function* () {
+                const watchers = new Map();
+                const entries = Array.isArray(resp.projects) ? resp.projects : [];
+                for (const entry of entries) {
+                    if (entry && typeof entry.root === "string") {
+                        watchers.set(entry.root, { status: "watching" });
+                    }
+                }
+                // One project-stats call per project. A failure here is not fatal: the
+                // renderer falls back to the registry's cached chunkCount, exactly as
+                // the in-process path does when the LanceDB query fails.
+                const chunkCounts = new Map();
+                for (const project of projects) {
+                    const stats = yield (0, daemon_client_1.sendDaemonCommand)({ cmd: "project-stats", root: project.root }, { timeoutMs: 30000 });
+                    if (stats.ok && typeof stats.chunks === "number") {
+                        chunkCounts.set(project.root, stats.chunks);
+                    }
+                }
+                return { watchers, chunkCounts };
+            }),
+            inProcess: () => __awaiter(this, void 0, void 0, function* () {
+                (0, watcher_store_1.listWatchers)(); // cleans stale entries as side effect
+                const watchers = new Map();
+                for (const project of projects) {
+                    const watcher = (0, watcher_store_1.getWatcherForProject)(project.root);
+                    if (watcher)
+                        watchers.set(project.root, { status: watcher.status });
+                }
+                const chunkCounts = new Map();
+                try {
+                    const { VectorDB } = yield Promise.resolve().then(() => __importStar(require("../lib/store/vector-db")));
+                    const db = new VectorDB(config_1.PATHS.lancedbDir);
+                    const table = yield db.ensureTable();
+                    for (const project of projects) {
+                        const prefix = project.root.endsWith("/")
+                            ? project.root
+                            : `${project.root}/`;
+                        const rows = yield table
+                            .query()
+                            .select(["id"])
+                            .where((0, filter_builder_1.pathStartsWith)(prefix))
+                            .toArray();
+                        chunkCounts.set(project.root, rows.length);
+                    }
+                    yield db.close();
+                }
+                catch (err) {
+                    // A sandbox denial is not "the query failed" — let it surface as the
+                    // one-line refusal instead of silently degrading to cached counts.
+                    if ((0, store_access_1.classifyLeaseError)(err) === "sandboxed")
+                        throw err;
+                    console.warn(`[status] Failed to query LanceDB for live chunk counts, using cached counts`);
+                }
+                return { watchers, chunkCounts };
+            }),
+        });
+    });
+}
 const style = {
     bold: (s) => `\x1b[1m${s}\x1b[22m`,
     dim: (s) => `\x1b[2m${s}\x1b[22m`,
@@ -102,34 +177,24 @@ Examples:
     var _a, _b, _c, _d;
     const globalConfig = (0, index_config_1.readGlobalConfig)();
     const projects = (0, project_registry_1.listProjects)();
-    (0, watcher_store_1.listWatchers)(); // cleans stale entries as side effect
     const indexing = (0, lock_1.isLocked)(config_1.PATHS.globalRoot);
     const currentRoot = (0, project_root_1.findProjectRoot)(process.cwd());
-    if (!opts.agent) {
-        // Header
-        console.log(`\n${style.bold("gmax")} · ${globalConfig.modelTier} (${globalConfig.vectorDim}d, ${globalConfig.embedMode})${indexing ? style.yellow(" · indexing...") : ""}`);
-    }
-    // Query live chunk counts from LanceDB
-    const chunkCounts = new Map();
+    // Resolved before the header so a sandbox refusal prints one clean line.
+    let view;
     try {
-        const { VectorDB } = yield Promise.resolve().then(() => __importStar(require("../lib/store/vector-db")));
-        const db = new VectorDB(config_1.PATHS.lancedbDir);
-        const table = yield db.ensureTable();
-        for (const project of projects) {
-            const prefix = project.root.endsWith("/")
-                ? project.root
-                : `${project.root}/`;
-            const rows = yield table
-                .query()
-                .select(["id"])
-                .where((0, filter_builder_1.pathStartsWith)(prefix))
-                .toArray();
-            chunkCounts.set(project.root, rows.length);
+        view = yield loadStatusView(projects);
+    }
+    catch (err) {
+        if ((0, store_access_1.reportStoreAccessRefusal)(err)) {
+            yield (0, exit_1.gracefulExit)(2);
+            return;
         }
-        yield db.close();
+        throw err;
     }
-    catch (_e) {
-        console.warn(`[status] Failed to query LanceDB for live chunk counts, using cached counts`);
+    const { watchers, chunkCounts } = view;
+    if (!opts.agent) {
+        // Header
+        console.log(`\n${style.bold("gmax")} · ${globalConfig.modelTier} (${globalConfig.vectorDim}d, ${globalConfig.embedMode})${indexing ? style.yellow(" · indexing...") : ""}`);
     }
     if (projects.length === 0) {
         if (opts.agent) {
@@ -143,7 +208,7 @@ Examples:
     }
     if (opts.agent) {
         for (const project of projects) {
-            const watcher = (0, watcher_store_1.getWatcherForProject)(project.root);
+            const watcher = watchers.get(project.root);
             const projectStatus = (_a = project.status) !== null && _a !== void 0 ? _a : "indexed";
             let st;
             if (projectStatus === "pending")
@@ -172,7 +237,7 @@ Examples:
     console.log();
     for (const project of projects) {
         const isCurrent = project.root === currentRoot;
-        const watcher = (0, watcher_store_1.getWatcherForProject)(project.root);
+        const watcher = watchers.get(project.root);
         // Status column
         let statusStr;
         const projectStatus = (_c = project.status) !== null && _c !== void 0 ? _c : "indexed";