grepmax 0.26.53 → 0.26.55

package/dist/lib/utils/safety-latch.js

@@ -0,0 +1,121 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SAFETY_LATCH_NAME = void 0;
+exports.safetyStopReason = safetyStopReason;
+exports.latchSafetyStop = latchSafetyStop;
+exports.assertNoSafetyStop = assertNoSafetyStop;
+const node_crypto_1 = require("node:crypto");
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const config_1 = require("../../config");
+/** Machine-wide stop: changing stores or installing a version cannot clear it. */
+exports.SAFETY_LATCH_NAME = "safety-stop.json";
+function safetyRoot() {
+    var _a;
+    return (_a = config_1.PATHS.sharedRoot) !== null && _a !== void 0 ? _a : path.dirname(config_1.PATHS.autostartDisabledFile);
+}
+/** Absence is distinct from an unreadable/corrupt stop, which stays stopped. */
+function safetyStopReason(root = safetyRoot()) {
+    const file = path.join(root, exports.SAFETY_LATCH_NAME);
+    try {
+        const stat = fs.lstatSync(file);
+        if (!stat.isFile() || stat.size > 8192)
+            return "unverified safety stop";
+        const value = JSON.parse(fs.readFileSync(file, "utf8"));
+        if (value.schemaVersion !== 1 ||
+            !Number.isFinite(value.at) ||
+            typeof value.reason !== "string" ||
+            !value.reason.trim())
+            return "unverified safety stop";
+        return value.reason.replace(/[\r\n\t]/g, " ").slice(0, 512);
+    }
+    catch (error) {
+        return error.code === "ENOENT"
+            ? null
+            : "unreadable safety stop";
+    }
+}
+/** Atomic durable latch; intentionally no automatic expiry or clear operation. */
+function latchSafetyStop(reason, root = safetyRoot()) {
+    if (safetyStopReason(root) !== null)
+        return;
+    fs.mkdirSync(root, { recursive: true, mode: 0o700 });
+    fs.chmodSync(root, 0o700);
+    const file = path.join(root, exports.SAFETY_LATCH_NAME);
+    const temporary = path.join(root, `.safety-stop-${(0, node_crypto_1.randomUUID)()}.tmp`);
+    let fd;
+    try {
+        fd = fs.openSync(temporary, "wx", 0o600);
+        const record = {
+            schemaVersion: 1,
+            at: Date.now(),
+            reason: reason.replace(/[\r\n\t]/g, " ").slice(0, 512) || "host safety stop",
+        };
+        fs.writeFileSync(fd, `${JSON.stringify(record)}\n`);
+        fs.fsyncSync(fd);
+        fs.closeSync(fd);
+        fd = undefined;
+        // Publish without replacing another concurrent stop's original cause.
+        try {
+            fs.linkSync(temporary, file);
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+        }
+        // Persist the directory entry, not only the payload, before stopping.
+        const dir = fs.openSync(root, "r");
+        try {
+            fs.fsyncSync(dir);
+        }
+        finally {
+            fs.closeSync(dir);
+        }
+    }
+    finally {
+        if (fd !== undefined)
+            fs.closeSync(fd);
+        try {
+            fs.unlinkSync(temporary);
+        }
+        catch (_a) { }
+    }
+}
+function assertNoSafetyStop() {
+    const reason = safetyStopReason();
+    if (reason !== null)
+        throw new Error(`gmax safety stop: ${reason}; containment must be reviewed before resuming`);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "grepmax",
-  "version": "0.26.53",
+  "version": "0.26.55",
   "author": "Robert Owens <78518764+reowens@users.noreply.github.com>",
   "homepage": "https://github.com/reowens/grepmax",
   "bugs": {

package/plugins/grepmax/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "grepmax",
-  "version": "0.26.53",
+  "version": "0.26.55",
   "description": "Semantic code search for Claude Code. Automatically indexes your project and provides intelligent search capabilities.",
   "author": {
     "name": "Robert Owens",

package/plugins/grepmax/hooks/watch-lease.js

@@ -15,15 +15,23 @@ const SOCKET = path.join(GMAX_DIR, "daemon.sock");
 // Activity refreshes this TTL; idle sessions do not watch forever.
 const SESSION_LEASE_TTL_MS = 4 * 60 * 60 * 1000;
 
-function isAutostartDisabled() {
-  if (process.env.GMAX_NO_AUTOSTART === "1") return true;
+function markerPresentOrUnknown(file) {
   try {
-    return fs.existsSync(path.join(GMAX_DIR, "autostart-disabled"));
-  } catch {
-    return false;
+    fs.lstatSync(file);
+    return true;
+  } catch (error) {
+    return error.code !== "ENOENT";
   }
 }
 
+function isAutostartDisabled() {
+  if (process.env.GMAX_NO_AUTOSTART === "1") return true;
+  return (
+    markerPresentOrUnknown(path.join(GMAX_DIR, "autostart-disabled")) ||
+    markerPresentOrUnknown(path.join(GMAX_DIR, "safety-stop.json"))
+  );
+}
+
 function readHookInput(timeoutMs = 1000) {
   return new Promise((resolve) => {
     let data = "";