grepmax 0.26.50 → 0.26.52

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "grepmax",
-  "version": "0.26.50",
+  "version": "0.26.52",
   "author": "Robert Owens <78518764+reowens@users.noreply.github.com>",
   "homepage": "https://github.com/reowens/grepmax",
   "bugs": {
@@ -41,10 +41,12 @@
     "typecheck": "tsc --noEmit",
     "test:typecheck": "tsc -p tsconfig.tests.json",
     "prepublishOnly": "pnpm run test:typecheck && pnpm build",
-    "preversion": "pnpm audit --prod && pnpm test && pnpm typecheck && pnpm run test:typecheck && pnpm run format:check && pnpm build && pnpm run audit:consumer",
+    "preversion": "pnpm audit && pnpm run audit:python && pnpm test && pnpm run test:python && pnpm typecheck && pnpm run test:typecheck && pnpm run format:check && pnpm build && pnpm run audit:consumer",
     "version": "bash scripts/sync-versions.sh && git add -A",
     "postversion": "bash scripts/postrelease.sh",
-    "audit:consumer": "node scripts/audit-consumer.cjs"
+    "audit:consumer": "node scripts/audit-consumer.cjs",
+    "audit:python": "python3 scripts/audit-python.py",
+    "test:python": "python3 -m unittest discover -s tests/python"
   },
   "keywords": [
     "grepmax",

package/plugins/grepmax/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "grepmax",
-  "version": "0.26.50",
+  "version": "0.26.52",
   "description": "Semantic code search for Claude Code. Automatically indexes your project and provides intelligent search capabilities.",
   "author": {
     "name": "Robert Owens",

package/plugins/grepmax/hooks/activity.js

@@ -0,0 +1,12 @@
+const { ensureSessionLease, readHookInput } = require("./watch-lease");
+
+// Bounded renewal on turns and Bash activity keeps long CLI sessions watched.
+// No detached timer, global watcher or additional MCP process is needed.
+async function main() {
+  const input = await readHookInput();
+  await ensureSessionLease(input, input.cwd || process.cwd(), {
+    allowStart: true,
+  });
+}
+
+main();

package/plugins/grepmax/hooks/cwd-changed.js

@@ -1,6 +1,5 @@
-const { execFileSync } = require("node:child_process");
 const {
-  acquireSessionLease,
+  ensureSessionLease,
   readHookInput,
   registeredRootFor,
   releaseSessionLeases,
@@ -20,19 +19,7 @@ async function main() {
     }
   }
 
-  if (!registeredRootFor(newCwd)) return;
-
-  try {
-    execFileSync("gmax", ["watch", "--daemon", "-b"], {
-      timeout: 5000,
-      stdio: "ignore",
-    });
-  } catch {
-    try {
-      execFileSync("gmax", ["watch", "-b"], { timeout: 5000, stdio: "ignore" });
-    } catch {}
-  }
-  await acquireSessionLease(input, newCwd);
+  await ensureSessionLease(input, newCwd, { allowStart: true });
 }
 
 main();

package/plugins/grepmax/hooks/start.js

@@ -2,7 +2,7 @@ const fs = require("node:fs");
 const _path = require("node:path");
 const { execFileSync } = require("node:child_process");
 const {
-  acquireSessionLease,
+  ensureSessionLease,
   readHookInput,
   registeredRootFor,
 } = require("./watch-lease");
@@ -70,43 +70,10 @@ function isProjectRegistered(dir) {
   return registeredRootFor(dir) !== null;
 }
 
-// A kill switch for the auto-start. Create ~/.gmax/autostart-disabled (or export
-// GMAX_NO_AUTOSTART=1) to keep sessions from reviving the daemon — needed when the
-// host is quarantined after a kernel-zone incident and the daemon's write volume is
-// the thing under investigation. Delete the file to restore normal behavior.
-//
-// The CLI honors the same switch via src/lib/utils/autostart.ts (PATHS.autostartDisabledFile).
-// This copy exists because a hook cannot import from dist — keep the two in sync.
-function isAutostartDisabled() {
-  if (process.env.GMAX_NO_AUTOSTART === "1") return true;
-  try {
-    return require("node:fs").existsSync(
-      _path.join(require("node:os").homedir(), ".gmax", "autostart-disabled"),
-    );
-  } catch {
-    return false;
-  }
-}
-
 async function startWatcher(input) {
-  if (isAutostartDisabled()) return;
   const dir = input.cwd || process.cwd();
   if (!isProjectRegistered(dir)) return;
-  try {
-    execFileSync("gmax", ["watch", "--daemon", "-b"], {
-      timeout: 5000,
-      stdio: "ignore",
-    });
-  } catch {
-    // Fallback to per-project mode (older gmax without --daemon)
-    try {
-      execFileSync("gmax", ["watch", "-b"], { timeout: 5000, stdio: "ignore" });
-    } catch {
-      // Watcher may already be running or gmax not in PATH — ignore
-    }
-  }
-  // The daemon only watches projects a session holds a lease on.
-  await acquireSessionLease(input, dir);
+  await ensureSessionLease(input, dir, { allowStart: true });
 }
 
 async function main() {

package/plugins/grepmax/hooks/watch-lease.js

@@ -1,10 +1,9 @@
 // Session watch leases for the hooks.
 //
-// The daemon only watches projects that some session holds a lease on (see
-// src/lib/daemon/watch-leases.ts). The MCP server holds the long-lived one; the
-// hooks take a session lease so a project is watched from the first moment of a
-// session, and drop it at SessionEnd. A hook cannot import from dist, so this
-// speaks the daemon's one-line JSON protocol directly.
+// Claude's CLI integration takes a lease at startup, renews it during activity,
+// and releases it at SessionEnd. Other MCP clients own separate leases. A hook
+// cannot import from dist, so this speaks the one-line Unix socket protocol.
+const { spawn } = require("node:child_process");
 const fs = require("node:fs");
 const net = require("node:net");
 const os = require("node:os");
@@ -13,10 +12,18 @@ const path = require("node:path");
 const GMAX_DIR = path.join(os.homedir(), ".gmax");
 const SOCKET = path.join(GMAX_DIR, "daemon.sock");
 
-// Long enough to cover a session without an MCP server; SessionEnd releases it
-// early, and the daemon caps any lease at 12h.
+// Activity refreshes this TTL; idle sessions do not watch forever.
 const SESSION_LEASE_TTL_MS = 4 * 60 * 60 * 1000;
 
+function isAutostartDisabled() {
+  if (process.env.GMAX_NO_AUTOSTART === "1") return true;
+  try {
+    return fs.existsSync(path.join(GMAX_DIR, "autostart-disabled"));
+  } catch {
+    return false;
+  }
+}
+
 function readHookInput(timeoutMs = 1000) {
   return new Promise((resolve) => {
     let data = "";
@@ -102,6 +109,7 @@ function sendOnce(cmd, timeoutMs) {
     socket.on("error", (err) =>
       finish({
         ok: false,
+        absent: err.code === "ENOENT" || err.code === "ECONNREFUSED",
         retry: err.code === "ENOENT" || err.code === "ECONNREFUSED",
       }),
     );
@@ -143,6 +151,42 @@ async function acquireSessionLease(input, dir) {
   return resp !== null;
 }
 
+/** Reuse a lease-capable daemon; start one only after a definite absent socket. */
+async function ensureSessionLease(input, dir, { allowStart = false } = {}) {
+  if (isAutostartDisabled() || !sessionHolder(input) || !registeredRootFor(dir))
+    return false;
+  const ping = await sendOnce({ cmd: "ping" }, 500);
+  if (ping.ok) {
+    if (!ping.resp.capabilities?.watchLeases) return false;
+    return acquireSessionLease(input, dir);
+  }
+  // Busy, initializing, denied and timed-out sockets belong to an existing
+  // daemon. Never start a per-project writer or replace that process here.
+  if (!allowStart || !ping.absent) return false;
+  try {
+    const child = spawn("gmax", ["watch", "--daemon", "-b"], {
+      detached: true,
+      stdio: "ignore",
+      cwd: dir,
+      // Another session can win the race after the absent-socket probe. The
+      // launcher must reuse that peer, even if its package version differs.
+      env: { ...process.env, GMAX_DAEMON_START_ONLY: "1" },
+    });
+    await new Promise((resolve, reject) => {
+      child.once("spawn", resolve);
+      child.once("error", reject);
+    });
+    child.unref();
+  } catch {
+    return false;
+  }
+  // A cold daemon may take longer than a hook's budget to become ready. Later
+  // activity retries ownership instead of opening another watcher.
+  const ready = await sendDaemonLine({ cmd: "ping" }, 1500);
+  if (!ready?.capabilities?.watchLeases) return false;
+  return acquireSessionLease(input, dir);
+}
+
 async function releaseSessionLeases(input, dir) {
   const holder = sessionHolder(input);
   const root = registeredRootFor(dir);
@@ -157,6 +201,8 @@ async function releaseSessionLeases(input, dir) {
 
 module.exports = {
   acquireSessionLease,
+  ensureSessionLease,
+  isAutostartDisabled,
   readHookInput,
   registeredRootFor,
   releaseSessionLeases,

package/plugins/grepmax/hooks.json

@@ -5,7 +5,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node ${CLAUDE_PLUGIN_ROOT}/hooks/start.js",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/start.js\"",
             "timeout": 10
           }
         ]
@@ -16,7 +16,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node ${CLAUDE_PLUGIN_ROOT}/hooks/stop.js",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/stop.js\"",
             "timeout": 10
           }
         ]
@@ -27,8 +27,8 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node ${CLAUDE_PLUGIN_ROOT}/hooks/cwd-changed.js",
-            "timeout": 5
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/cwd-changed.js\"",
+            "timeout": 10
           }
         ]
       }
@@ -38,7 +38,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node ${CLAUDE_PLUGIN_ROOT}/hooks/subagent-start.js",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/subagent-start.js\"",
             "timeout": 3
           }
         ]
@@ -50,11 +50,34 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node ${CLAUDE_PLUGIN_ROOT}/hooks/pre-grep.js",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/pre-grep.js\"",
             "timeout": 2
           }
         ]
       }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/activity.js\"",
+            "timeout": 10
+          }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/activity.js\"",
+            "timeout": 10
+          }
+        ]
+      }
     ]
   }
 }