grepmax 0.26.56 → 0.26.58

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "grepmax",
       "source": "./plugins/grepmax",
       "description": "Semantic code search for Claude Code. Automatically indexes your project and provides intelligent search capabilities.",
-      "version": "0.26.56",
+      "version": "0.26.58",
       "author": {
         "name": "Robert Owens",
         "email": "robowens@me.com"

package/README.md

@@ -57,7 +57,7 @@ gmax doctor                   # Health check
 gmax doctor --fix             # Repair checks; full-table maintenance is disabled
 ```
 
-**Storage containment:** full-table compaction is disabled, including forced maintenance and doctor repair. Existing retained index copies are not reclaimed by this release. The verified prune-only recovery path is separate work; normal incremental indexing remains available when the host is healthy and not quarantined. A persistent host safety stop blocks mutation and daemon restart. Installing an update preserves existing quarantine. Speculative embedding warmup and maintenance timers are disabled. On macOS, startup, heavy queries, worker forks and MLX launches require known normal OS memory pressure and a healthy kernel-zone sample; unavailable probes report bounded diagnostic details and refuse work.
+**Storage containment:** full-table compaction is disabled, including forced maintenance and doctor repair. Existing retained index copies are not reclaimed by this release. The verified prune-only recovery path is separate work; normal incremental indexing remains available when the host is healthy and not quarantined. A persistent host safety stop blocks mutation and normal daemon restart; an explicit read-only start can serve the retained index. Installing an update preserves existing quarantine. Speculative embedding warmup and maintenance timers are disabled. On macOS, startup, heavy queries, worker forks and MLX launches require known normal OS memory pressure and a healthy kernel-zone sample; warning or unavailable probes pause heavy work while the daemon serves bounded reads. Known critical pressure still stops the daemon.
 
 ### Core Commands
 
@@ -472,6 +472,12 @@ gmax watch restart            # Restart daemon
 
 `gmax doctor` reports ANN index state. `ANN: vector index not built` is normal with the default exact-search configuration.
 
+`gmax doctor` and `gmax status` report persistent safety stops and daemon startup quarantine. `doctor` exits with code 2 when startup is blocked; `status --json` includes `daemon.startupBlockedReason`. Installing an update preserves these stops. macOS kernel-zone probes use `zprint -L` to omit the wired-memory report and kernel symbolication while retaining the same zone counters and pressure thresholds.
+
+When heavy work is paused, the daemon keeps metadata, bounded symbol/file lookups, stored skeletons by exact file path, and keyword search available. Search uses the existing FTS index and excludes unindexed rows, loads no embedding model, returns at most 20 results, and reports keyword-only scores and retained-index freshness. Native queries have a two-second deadline and run one at a time with 48 MiB of combined Lance cache capacity. Indexing, watchers, vector/graph scans, and model launches remain paused. Missing FTS indexes return an error; paused search never rebuilds an index or falls back to a corpus scan.
+
+To serve bounded reads under an existing startup quarantine, run `gmax watch --daemon --read-only -b`. This preserves the safety markers. `status --json` reports `daemon.service.mode` and its reason; `doctor` reports paused availability and skips native corpus diagnostics. Pausing is sticky for that daemon process. Full service requires a deliberate restart after host recovery and quarantine review. Known critical OS or kernel pressure still stops even the read-only service.
+
 Full-table compaction and new FTS/ANN index builds are disabled in the containment release, including forced maintenance and doctor repair. Existing indexes remain readable; missing lexical indexes fall back to available retrieval. Retained copies are not recovered by this release. A separate exclusive prune-only path requires validation before deployment. Do not repeatedly force repair, use future cutoffs or manually remove index fragments.
 
 `~/.gmax/logs/daemon.log` records containment skips and retained historical compaction outcomes, including duration, logical size, disk size before/after, free space, and bytes reclaimed. `gmax status --json` exposes the last outcome under `daemon.compaction`; its `at` timestamp identifies when it was recorded. Five-minute resource snapshots track footprint, RSS, heap, external/ArrayBuffer memory, Lance cache, workers and pending work for memory investigations. Reading status uses retained snapshots and does not scan the index directory. Logs rotate to `daemon.log.prev`.

package/dist/commands/doctor.js

@@ -52,6 +52,7 @@ const config_1 = require("../config");
 const embedding_status_1 = require("../lib/index/embedding-status");
 const index_config_1 = require("../lib/index/index-config");
 const maintenance_policy_1 = require("../lib/store/maintenance-policy");
+const autostart_1 = require("../lib/utils/autostart");
 const doctor_optimize_1 = require("../lib/utils/doctor-optimize");
 const doctor_status_1 = require("../lib/utils/doctor-status");
 const exit_1 = require("../lib/utils/exit");
@@ -346,7 +347,7 @@ exports.doctor = new commander_1.Command("doctor")
     .option("--agent", "Compact output for AI agents", false)
     .action((opts) => __awaiter(void 0, void 0, void 0, function* () {
     var _a, _b;
-    var _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o;
+    var _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p;
     if (opts.fix) {
         const denied = (0, maintenance_policy_1.storeMutationDeniedReason)();
         if (denied !== null) {
@@ -357,6 +358,32 @@ exports.doctor = new commander_1.Command("doctor")
     }
     if (!opts.agent)
         console.log("gmax Doctor\n");
+    const startupBlockedReason = (0, autostart_1.daemonStartDeniedReason)();
+    if (startupBlockedReason !== null) {
+        const reason = startupBlockedReason.replace(/[\r\n\t]/g, " ");
+        console.log(opts.agent
+            ? `daemon_startup\tblocked=true\treason=${reason}`
+            : `FAIL  Daemon startup blocked: ${reason}`);
+        // Inspect the retained index, but do not report a healthy installation
+        // while the persistent host stop or autostart quarantine prevents use.
+        process.exitCode = 2;
+    }
+    // Metadata-only diagnostics while paused: never open a second native
+    // reader or scan the retained corpus on a pressured host.
+    const { sendDaemonCommand } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/daemon-client")));
+    const daemonStatus = yield sendDaemonCommand({ cmd: "status" });
+    const service = daemonStatus.service;
+    if (daemonStatus.ok && (service === null || service === void 0 ? void 0 : service.mode) === "paused") {
+        const reason = String((_c = service.reason) !== null && _c !== void 0 ? _c : "read-only service requested").replace(/[\r\n\t]/g, " ");
+        console.log(opts.agent
+            ? `daemon_service\tmode=paused\treads=bounded\treason=${reason}`
+            : `WARN  Daemon available for bounded reads; indexing and embeddings paused: ${reason}`);
+        console.log(opts.agent
+            ? "index_diagnostics\tskipped=paused_service"
+            : "INFO  Native index diagnostics skipped while heavy work is paused");
+        process.exitCode = 2;
+        return;
+    }
     const root = config_1.PATHS.globalRoot;
     const models = config_1.PATHS.models;
     const grammars = config_1.PATHS.grammars;
@@ -371,12 +398,12 @@ exports.doctor = new commander_1.Command("doctor")
         checkDir("Grammars", grammars);
     }
     const globalConfig = (0, index_config_1.readGlobalConfig)();
-    const tier = (_c = config_1.MODEL_TIERS[globalConfig.modelTier]) !== null && _c !== void 0 ? _c : config_1.MODEL_TIERS.small;
+    const tier = (_d = config_1.MODEL_TIERS[globalConfig.modelTier]) !== null && _d !== void 0 ? _d : config_1.MODEL_TIERS.small;
     if (!config_1.MODEL_TIERS[globalConfig.modelTier]) {
         console.log(`WARN  Unknown model tier '${globalConfig.modelTier}', falling back to 'small'`);
     }
     const embedModel = globalConfig.embedMode === "gpu"
-        ? ((_d = globalConfig.mlxModel) !== null && _d !== void 0 ? _d : tier.mlxModel)
+        ? ((_e = globalConfig.mlxModel) !== null && _e !== void 0 ? _e : tier.mlxModel)
         : tier.onnxModel;
     if (!opts.agent) {
         console.log(`\nEmbed mode: ${globalConfig.embedMode} | Model tier: ${globalConfig.modelTier} (${tier.vectorDim}d)`);
@@ -437,7 +464,7 @@ exports.doctor = new commander_1.Command("doctor")
                     body: JSON.stringify({ texts: ["gmax health check"] }),
                 });
                 const embedData = yield embedRes.json();
-                const dim = (_e = (_b = (_a = embedData === null || embedData === void 0 ? void 0 : embedData.vectors) === null || _a === void 0 ? void 0 : _a[0]) === null || _b === void 0 ? void 0 : _b.length) !== null && _e !== void 0 ? _e : 0;
+                const dim = (_f = (_b = (_a = embedData === null || embedData === void 0 ? void 0 : embedData.vectors) === null || _a === void 0 ? void 0 : _a[0]) === null || _b === void 0 ? void 0 : _b.length) !== null && _f !== void 0 ? _f : 0;
                 const ms = Date.now() - start;
                 const expectedDim = tier.vectorDim || 384;
                 if (dim === expectedDim) {
@@ -464,7 +491,7 @@ exports.doctor = new commander_1.Command("doctor")
     // caller most likely to be inside the sandbox this check is about.
     const sandbox = checkClaudeSandbox({
         home: os.homedir(),
-        projectRoot: (_f = (0, project_root_1.findProjectRoot)(process.cwd())) !== null && _f !== void 0 ? _f : process.cwd(),
+        projectRoot: (_g = (0, project_root_1.findProjectRoot)(process.cwd())) !== null && _g !== void 0 ? _g : process.cwd(),
     });
     if (sandbox) {
         if (opts.agent) {
@@ -583,7 +610,7 @@ exports.doctor = new commander_1.Command("doctor")
                         ? "LOW"
                         : "ok";
         }
-        catch (_p) { }
+        catch (_q) { }
         const staleChunkerProjects = projects.filter((p) => { var _a; return p.status === "indexed" &&
             ((_a = p.chunkerVersion) !== null && _a !== void 0 ? _a : 1) < config_1.CONFIG.CHUNKER_VERSION; });
         const staleEmbeddingProjects = projects.filter((p) => p.status === "indexed" &&
@@ -612,9 +639,9 @@ exports.doctor = new commander_1.Command("doctor")
                 `schema_dim=${physicalDim !== null && physicalDim !== void 0 ? physicalDim : "none"}`,
                 `schema_dim_ok=${schemaGap ? "false" : "true"}`,
                 `ann_index=${vectorIndex ? "present" : "absent"}`,
-                `ann_indexed=${(_g = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.numIndexedRows) !== null && _g !== void 0 ? _g : 0}`,
-                `ann_unindexed=${(_h = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.numUnindexedRows) !== null && _h !== void 0 ? _h : 0}`,
-                `ann_metric=${(_j = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.distanceType) !== null && _j !== void 0 ? _j : "none"}`,
+                `ann_indexed=${(_h = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.numIndexedRows) !== null && _h !== void 0 ? _h : 0}`,
+                `ann_unindexed=${(_j = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.numUnindexedRows) !== null && _j !== void 0 ? _j : 0}`,
+                `ann_metric=${(_k = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.distanceType) !== null && _k !== void 0 ? _k : "none"}`,
             ];
             console.log(fields.join("\t"));
             if (schemaGap) {
@@ -669,7 +696,7 @@ exports.doctor = new commander_1.Command("doctor")
                 console.log(`ok  Schema: vector table is ${physicalDim}d`);
             }
             if (vectorIndexStats) {
-                console.log(`ok  ANN: ${vectorIndexStats.numIndexedRows.toLocaleString()} indexed, ${vectorIndexStats.numUnindexedRows.toLocaleString()} unindexed, metric=${(_k = vectorIndexStats.distanceType) !== null && _k !== void 0 ? _k : "unknown"}`);
+                console.log(`ok  ANN: ${vectorIndexStats.numIndexedRows.toLocaleString()} indexed, ${vectorIndexStats.numUnindexedRows.toLocaleString()} unindexed, metric=${(_l = vectorIndexStats.distanceType) !== null && _l !== void 0 ? _l : "unknown"}`);
             }
             else {
                 console.log("INFO  ANN: vector index not built (set GMAX_ANN=1)");
@@ -798,7 +825,7 @@ exports.doctor = new commander_1.Command("doctor")
                         yield mc.close();
                     }
                 }
-                catch (_q) { }
+                catch (_r) { }
             }
         }
         // --fix auto-remediation
@@ -876,7 +903,7 @@ exports.doctor = new commander_1.Command("doctor")
                         const done = yield sendStreamingCommand({ cmd: "index", root: p.root, reset: true }, () => { }).catch((e) => ({ ok: false, error: String(e) }));
                         if (done.ok &&
                             (!("degraded" in done) || done.degraded !== true)) {
-                            const chunks = (_l = done.indexed) !== null && _l !== void 0 ? _l : 0;
+                            const chunks = (_m = done.indexed) !== null && _m !== void 0 ? _m : 0;
                             if (opts.agent) {
                                 console.log(`stale_chunker_reindexed\tname=${name}\tchunks=${chunks}`);
                             }
@@ -888,7 +915,7 @@ exports.doctor = new commander_1.Command("doctor")
                         else if (!opts.agent) {
                             const degraded = "degraded" in done && done.degraded === true;
                             const reason = degraded
-                                ? `${(_m = ("scanErrors" in done ? done.scanErrors : 0)) !== null && _m !== void 0 ? _m : 0} scan errors, ${(_o = ("failedFiles" in done ? done.failedFiles : 0)) !== null && _o !== void 0 ? _o : 0} file failures`
+                                ? `${(_o = ("scanErrors" in done ? done.scanErrors : 0)) !== null && _o !== void 0 ? _o : 0} scan errors, ${(_p = ("failedFiles" in done ? done.failedFiles : 0)) !== null && _p !== void 0 ? _p : 0} file failures`
                                 : done.error;
                             console.log(`FAIL  ${name}: reindex failed (${reason})`);
                         }

package/dist/commands/status.js

@@ -51,6 +51,7 @@ const config_1 = require("../config");
 const embedding_status_1 = require("../lib/index/embedding-status");
 const index_config_1 = require("../lib/index/index-config");
 const index_state_footer_1 = require("../lib/output/index-state-footer");
+const autostart_1 = require("../lib/utils/autostart");
 const daemon_client_1 = require("../lib/utils/daemon-client");
 const exit_1 = require("../lib/utils/exit");
 const filter_builder_1 = require("../lib/utils/filter-builder");
@@ -78,12 +79,13 @@ function loadStatusView(projects) {
             daemon: () => (0, daemon_client_1.sendDaemonCommand)({ cmd: "status" }),
             render: (resp) => __awaiter(this, void 0, void 0, function* () {
                 var _a;
+                var _b;
                 const watchers = new Map();
                 const entries = Array.isArray(resp.projects) ? resp.projects : [];
                 const health = new Map();
                 for (const entry of entries) {
                     if (entry && typeof entry.root === "string") {
-                        watchers.set(entry.root, { status: (_a = entry.status) !== null && _a !== void 0 ? _a : "watching" });
+                        watchers.set(entry.root, { status: (_b = entry.status) !== null && _b !== void 0 ? _b : "watching" });
                         if (entry.indexState)
                             health.set(entry.root, entry.indexState);
                     }
@@ -93,15 +95,21 @@ function loadStatusView(projects) {
                 // the in-process path does when the LanceDB query fails.
                 const chunkCounts = new Map();
                 for (const project of projects) {
+                    if (((_a = resp.service) === null || _a === void 0 ? void 0 : _a.mode) === "paused")
+                        break;
                     const stats = yield (0, daemon_client_1.sendDaemonCommand)({ cmd: "project-stats", root: project.root }, { timeoutMs: 30000 });
                     if (stats.ok && typeof stats.chunks === "number") {
                         chunkCounts.set(project.root, stats.chunks);
                     }
                 }
-                const daemon = Object.assign(Object.assign(Object.assign({}, (resp.compaction !== undefined
+                const daemon = Object.assign(Object.assign(Object.assign(Object.assign({}, (resp.compaction !== undefined
                     ? { compaction: resp.compaction }
                     : {})), (resp.resources !== undefined
                     ? { resources: resp.resources }
+                    : {})), (resp.service
+                    ? {
+                        service: resp.service,
+                    }
                     : {})), { pid: typeof resp.pid === "number" ? resp.pid : null, uptimeSec: typeof resp.uptime === "number" ? resp.uptime : null, 
                     // Older daemons do not report these.
                     workers: typeof resp.workers === "number" ? resp.workers : null, workerThreads: resp.workerThreads &&
@@ -206,7 +214,9 @@ function buildStatusJson(input) {
             ? ((_c = input.countWorkers) !== null && _c !== void 0 ? _c : countWorkerProcesses)(d.pid)
             : null);
     }
-    return Object.assign(Object.assign({}, (input.stores ? { stores: input.stores } : {})), { daemon: Object.assign(Object.assign({ running: d !== undefined, pid: (_d = d === null || d === void 0 ? void 0 : d.pid) !== null && _d !== void 0 ? _d : null, since: (d === null || d === void 0 ? void 0 : d.uptimeSec) != null ? now - d.uptimeSec * 1000 : null, workerThreads: (_e = d === null || d === void 0 ? void 0 : d.workerThreads) !== null && _e !== void 0 ? _e : null }, ((d === null || d === void 0 ? void 0 : d.resources) !== undefined ? { resources: d.resources } : {})), ((d === null || d === void 0 ? void 0 : d.compaction) !== undefined ? { compaction: d.compaction } : {})), settings: {
+    return Object.assign(Object.assign({}, (input.stores ? { stores: input.stores } : {})), { daemon: Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ running: d !== undefined }, (input.startupBlockedReason != null
+            ? { startupBlockedReason: input.startupBlockedReason }
+            : {})), { pid: (_d = d === null || d === void 0 ? void 0 : d.pid) !== null && _d !== void 0 ? _d : null, since: (d === null || d === void 0 ? void 0 : d.uptimeSec) != null ? now - d.uptimeSec * 1000 : null, workerThreads: (_e = d === null || d === void 0 ? void 0 : d.workerThreads) !== null && _e !== void 0 ? _e : null }), ((d === null || d === void 0 ? void 0 : d.service) ? { service: d.service } : {})), ((d === null || d === void 0 ? void 0 : d.resources) !== undefined ? { resources: d.resources } : {})), ((d === null || d === void 0 ? void 0 : d.compaction) !== undefined ? { compaction: d.compaction } : {})), settings: {
             embedMode: globalConfig.embedMode,
             modelTier: globalConfig.modelTier,
             vectorDim: globalConfig.vectorDim,
@@ -263,8 +273,8 @@ Examples:
   gmax status --json       The same, plus daemon and settings, as JSON
 `)
     .action((opts) => __awaiter(void 0, void 0, void 0, function* () {
-    var _a, _b;
-    var _c, _d, _e, _f, _g, _h, _j;
+    var _a, _b, _c, _d;
+    var _e, _f, _g, _h, _j, _k, _l, _m;
     const globalConfig = (0, index_config_1.readGlobalConfig)();
     const projects = (0, project_registry_1.listProjects)();
     const indexing = (0, lock_1.isLocked)(config_1.PATHS.globalRoot);
@@ -283,6 +293,7 @@ Examples:
         throw err;
     }
     const { watchers, chunkCounts } = view;
+    const startupBlockedReason = (0, autostart_1.daemonStartDeniedReason)();
     if (opts.json) {
         const json = buildStatusJson({
             stores,
@@ -290,6 +301,7 @@ Examples:
             projects,
             globalConfig,
             indexing,
+            startupBlockedReason,
             workerThreads: (0, config_1.resolveWorkerThreads)({
                 env: process.env.GMAX_WORKER_THREADS,
                 configValue: globalConfig.workerThreads,
@@ -303,18 +315,30 @@ Examples:
         // Header
         console.log(`\n${style.bold("gmax")} · ${globalConfig.modelTier} (${globalConfig.vectorDim}d, ${globalConfig.embedMode})${indexing ? style.yellow(" · indexing...") : ""}`);
     }
+    if (((_b = (_a = view.daemon) === null || _a === void 0 ? void 0 : _a.service) === null || _b === void 0 ? void 0 : _b.mode) === "paused") {
+        const reason = ((_e = view.daemon.service.reason) !== null && _e !== void 0 ? _e : "host pressure").replace(/[\r\n\t]/g, " ");
+        console.log(opts.agent
+            ? `daemon_service\tmode=paused\treason=${reason}`
+            : style.yellow(`Bounded reads available; indexing and embeddings paused: ${reason}`));
+    }
+    else if (startupBlockedReason !== null) {
+        const reason = startupBlockedReason.replace(/[\r\n\t]/g, " ");
+        console.log(opts.agent
+            ? `daemon_startup\tblocked=true\treason=${reason}`
+            : style.red(`Daemon startup blocked: ${reason}`));
+    }
     for (const store of stores) {
         if (opts.agent) {
             console.log(`store\t${store.home}\t${store.state}\tprefixes=${store.prefixes.join(",")}${store.error ? `\terror=${store.error}` : ""}`);
             for (const project of store.projects)
-                console.log(`store_project\t${store.home}\t${project.name}\t${(_c = project.chunkCount) !== null && _c !== void 0 ? _c : 0}\t${(_d = project.status) !== null && _d !== void 0 ? _d : "indexed"}\tcounts=cached`);
+                console.log(`store_project\t${store.home}\t${project.name}\t${(_f = project.chunkCount) !== null && _f !== void 0 ? _f : 0}\t${(_g = project.status) !== null && _g !== void 0 ? _g : "indexed"}\tcounts=cached`);
         }
         else {
             console.log(`\nStore: ${shortenPath(store.home)} — ${store.state}${store.error ? ` (${store.error})` : ""}`);
             if (store.state === "offline")
                 console.log("  Connect the drive to list its projects.");
             for (const project of store.projects)
-                console.log(`  ${project.name}  ${formatChunks(project.chunkCount)} chunks (cached)  ${(_e = project.status) !== null && _e !== void 0 ? _e : "indexed"}`);
+                console.log(`  ${project.name}  ${formatChunks(project.chunkCount)} chunks (cached)  ${(_h = project.status) !== null && _h !== void 0 ? _h : "indexed"}`);
         }
     }
     if (projects.length === 0) {
@@ -331,9 +355,9 @@ Examples:
         for (const project of projects) {
             const st = projectState(project, watchers.get(project.root));
             const isCurrent = project.root === currentRoot;
-            const count = (_f = chunkCounts.get(project.root)) !== null && _f !== void 0 ? _f : project.chunkCount;
+            const count = (_j = chunkCounts.get(project.root)) !== null && _j !== void 0 ? _j : project.chunkCount;
             const identity = (0, embedding_status_1.projectEmbeddingStatus)(project, globalConfig);
-            console.log(`${project.name}\t${formatChunks(count)}\t${formatAge(project.lastIndexed)}\t${st}\tembedding=${identity.state}${isCurrent ? "\tcurrent" : ""}${((_a = view.health) === null || _a === void 0 ? void 0 : _a.get(project.root)) ? `\t${(_g = (0, index_state_footer_1.formatIndexStateFooter)(view.health.get(project.root), { agent: true })) !== null && _g !== void 0 ? _g : ""}` : ""}`);
+            console.log(`${project.name}\t${formatChunks(count)}\t${formatAge(project.lastIndexed)}\t${st}\tembedding=${identity.state}${isCurrent ? "\tcurrent" : ""}${((_c = view.health) === null || _c === void 0 ? void 0 : _c.get(project.root)) ? `\t${(_k = (0, index_state_footer_1.formatIndexStateFooter)(view.health.get(project.root), { agent: true })) !== null && _k !== void 0 ? _k : ""}` : ""}`);
         }
         const legacyNotice = (0, embedding_status_1.formatLegacyEmbeddingNotice)((0, embedding_status_1.countLegacyEmbeddingProjects)(projects, globalConfig), { agent: true });
         if (legacyNotice)
@@ -349,7 +373,7 @@ Examples:
         const watcher = watchers.get(project.root);
         // Status column
         let statusStr;
-        const projectStatus = (_h = project.status) !== null && _h !== void 0 ? _h : "indexed";
+        const projectStatus = (_l = project.status) !== null && _l !== void 0 ? _l : "indexed";
         if (projectStatus === "pending") {
             statusStr = style.yellow("pending");
         }
@@ -369,7 +393,7 @@ Examples:
             statusStr = style.dim("idle");
         }
         // Chunks column
-        const count = (_j = chunkCounts.get(project.root)) !== null && _j !== void 0 ? _j : project.chunkCount;
+        const count = (_m = chunkCounts.get(project.root)) !== null && _m !== void 0 ? _m : project.chunkCount;
         const chunks = `${formatChunks(count)} chunks`;
         // Age column
         const age = formatAge(project.lastIndexed);
@@ -378,7 +402,7 @@ Examples:
         const marker = isCurrent ? style.cyan(" ←") : "";
         const name = project.name.padEnd(nameWidth);
         console.log(`  ${name}  ${chunks.padEnd(12)}  ${age.padEnd(10)}  ${statusStr}  embedding:${embedding}${marker}`);
-        const health = (0, index_state_footer_1.formatIndexStateFooter)((_b = view.health) === null || _b === void 0 ? void 0 : _b.get(project.root), {
+        const health = (0, index_state_footer_1.formatIndexStateFooter)((_d = view.health) === null || _d === void 0 ? void 0 : _d.get(project.root), {
             agent: false,
         });
         if (health)

package/dist/commands/watch.js

@@ -72,12 +72,18 @@ exports.watch = new commander_1.Command("watch")
     .description("Start background file watcher for live reindexing")
     .option("-b, --background", "Run watcher in background and exit")
     .option("-d, --daemon", "Run as centralized daemon watching projects that active sessions hold")
+    .option("--read-only", "Serve bounded reads without indexing, models, or clearing quarantine")
     .option("-p, --path <dir>", "Directory to watch (defaults to project root)")
     .option("--no-idle-timeout", "Disable the 30-minute idle shutdown")
     .action((options) => __awaiter(void 0, void 0, void 0, function* () {
     var _a, _b;
+    if (options.readOnly && !options.daemon) {
+        console.error("gmax: --read-only requires --daemon");
+        process.exitCode = 2;
+        return;
+    }
     const safetyDenied = (0, autostart_1.daemonStartDeniedReason)();
-    if (safetyDenied !== null) {
+    if (safetyDenied !== null && !options.readOnly) {
         console.error(`gmax: ${safetyDenied}; preserving containment`);
         process.exitCode = 2;
         return;
@@ -114,6 +120,14 @@ exports.watch = new commander_1.Command("watch")
                 const cliVersion = JSON.parse(fs.readFileSync(path.join(__dirname, "../../package.json"), "utf-8")).version;
                 const resp = yield sendDaemonCommand({ cmd: "ping" });
                 if (resp.version && resp.version === cliVersion) {
+                    if (options.readOnly) {
+                        const paused = yield sendDaemonCommand({
+                            cmd: "pause",
+                            reason: "read-only service requested",
+                        });
+                        if (!paused.ok)
+                            throw new Error(String(paused.error));
+                    }
                     process.exit(0);
                 }
                 console.log(`Daemon version mismatch (${resp.version} → ${cliVersion}), restarting...`);
@@ -151,7 +165,9 @@ exports.watch = new commander_1.Command("watch")
             const { spawnDaemonProcess } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/daemon-launcher")));
             let started;
             try {
-                started = yield spawnDaemonProcess();
+                started = options.readOnly
+                    ? yield spawnDaemonProcess({ readOnly: true })
+                    : yield spawnDaemonProcess();
             }
             catch (error) {
                 const message = error instanceof Error ? error.message : String(error);
@@ -195,7 +211,10 @@ exports.watch = new commander_1.Command("watch")
             console.error("[daemon] unhandledRejection:", reason);
         });
         try {
-            yield daemon.start();
+            if (options.readOnly)
+                yield daemon.start({ readOnly: true });
+            else
+                yield daemon.start();
         }
         catch (err) {
             const code = err === null || err === void 0 ? void 0 : err.code;