grepmax 0.26.57 → 0.26.59

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "grepmax",
       "source": "./plugins/grepmax",
       "description": "Semantic code search for Claude Code. Automatically indexes your project and provides intelligent search capabilities.",
-      "version": "0.26.57",
+      "version": "0.26.59",
       "author": {
         "name": "Robert Owens",
         "email": "robowens@me.com"

package/README.md

@@ -57,7 +57,7 @@ gmax doctor                   # Health check
 gmax doctor --fix             # Repair checks; full-table maintenance is disabled
 ```
 
-**Storage containment:** full-table compaction is disabled, including forced maintenance and doctor repair. Existing retained index copies are not reclaimed by this release. The verified prune-only recovery path is separate work; normal incremental indexing remains available when the host is healthy and not quarantined. A persistent host safety stop blocks mutation and daemon restart. Installing an update preserves existing quarantine. Speculative embedding warmup and maintenance timers are disabled. On macOS, startup, heavy queries, worker forks and MLX launches require known normal OS memory pressure and a healthy kernel-zone sample; unavailable probes report bounded diagnostic details and refuse work.
+**Storage containment:** full-table compaction is disabled, including forced maintenance and doctor repair. Existing retained index copies are not reclaimed by this release. The verified prune-only recovery path is separate work; normal incremental indexing remains available when the host is healthy and not quarantined. A persistent host safety stop blocks mutation and normal daemon restart; an explicit read-only start can serve the retained index. Installing an update preserves existing quarantine. Speculative embedding warmup and maintenance timers are disabled. On macOS, startup, heavy queries, worker forks and MLX launches require known normal OS memory pressure and a healthy kernel-zone sample; warning or unavailable probes pause heavy work while the daemon serves bounded reads. Known critical pressure still stops the daemon.
 
 ### Core Commands
 
@@ -474,6 +474,10 @@ gmax watch restart            # Restart daemon
 
 `gmax doctor` and `gmax status` report persistent safety stops and daemon startup quarantine. `doctor` exits with code 2 when startup is blocked; `status --json` includes `daemon.startupBlockedReason`. Installing an update preserves these stops. macOS kernel-zone probes use `zprint -L` to omit the wired-memory report and kernel symbolication while retaining the same zone counters and pressure thresholds.
 
+When heavy work is paused, the daemon keeps metadata, bounded symbol/file lookups, stored skeletons by exact file path, and keyword search available. Search uses the existing FTS index and excludes unindexed rows, loads no embedding model, returns at most 20 results, and reports keyword-only scores and retained-index freshness. CLI agent output preserves the keyword-only warning, and daemon reads skip client-side model setup. Native queries have a two-second deadline and run one at a time with 48 MiB of combined Lance cache capacity. Indexing, watchers, vector/graph scans, and model launches remain paused. Missing FTS indexes return an error; paused search never rebuilds an index or falls back to a corpus scan.
+
+To serve bounded reads under an existing startup quarantine, run `gmax watch --daemon --read-only -b`. This preserves the safety markers. `status --json` reports `daemon.service.mode` and its reason; `doctor` reports paused availability and skips native corpus diagnostics. Pausing is sticky for that daemon process. Full service requires a deliberate restart after host recovery and quarantine review. Known critical OS or kernel pressure still stops even the read-only service.
+
 Full-table compaction and new FTS/ANN index builds are disabled in the containment release, including forced maintenance and doctor repair. Existing indexes remain readable; missing lexical indexes fall back to available retrieval. Retained copies are not recovered by this release. A separate exclusive prune-only path requires validation before deployment. Do not repeatedly force repair, use future cutoffs or manually remove index fragments.
 
 `~/.gmax/logs/daemon.log` records containment skips and retained historical compaction outcomes, including duration, logical size, disk size before/after, free space, and bytes reclaimed. `gmax status --json` exposes the last outcome under `daemon.compaction`; its `at` timestamp identifies when it was recorded. Five-minute resource snapshots track footprint, RSS, heap, external/ArrayBuffer memory, Lance cache, workers and pending work for memory investigations. Reading status uses retained snapshots and does not scan the index directory. Logs rotate to `daemon.log.prev`.

package/dist/commands/doctor.js

@@ -347,7 +347,7 @@ exports.doctor = new commander_1.Command("doctor")
     .option("--agent", "Compact output for AI agents", false)
     .action((opts) => __awaiter(void 0, void 0, void 0, function* () {
     var _a, _b;
-    var _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o;
+    var _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p;
     if (opts.fix) {
         const denied = (0, maintenance_policy_1.storeMutationDeniedReason)();
         if (denied !== null) {
@@ -358,6 +358,22 @@ exports.doctor = new commander_1.Command("doctor")
     }
     if (!opts.agent)
         console.log("gmax Doctor\n");
+    // Metadata-only diagnostics while paused: never open a second native
+    // reader or scan the retained corpus on a pressured host.
+    const { sendDaemonCommand } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/daemon-client")));
+    const daemonStatus = yield sendDaemonCommand({ cmd: "status" });
+    const service = daemonStatus.service;
+    if (daemonStatus.ok && (service === null || service === void 0 ? void 0 : service.mode) === "paused") {
+        const reason = String((_c = service.reason) !== null && _c !== void 0 ? _c : "read-only service requested").replace(/[\r\n\t]/g, " ");
+        console.log(opts.agent
+            ? `daemon_service\tmode=paused\treads=bounded\treason=${reason}`
+            : `WARN  Daemon available for bounded reads; indexing and embeddings paused: ${reason}`);
+        console.log(opts.agent
+            ? "index_diagnostics\tskipped=paused_service"
+            : "INFO  Native index diagnostics skipped while heavy work is paused");
+        process.exitCode = 2;
+        return;
+    }
     const startupBlockedReason = (0, autostart_1.daemonStartDeniedReason)();
     if (startupBlockedReason !== null) {
         const reason = startupBlockedReason.replace(/[\r\n\t]/g, " ");
@@ -382,12 +398,12 @@ exports.doctor = new commander_1.Command("doctor")
         checkDir("Grammars", grammars);
     }
     const globalConfig = (0, index_config_1.readGlobalConfig)();
-    const tier = (_c = config_1.MODEL_TIERS[globalConfig.modelTier]) !== null && _c !== void 0 ? _c : config_1.MODEL_TIERS.small;
+    const tier = (_d = config_1.MODEL_TIERS[globalConfig.modelTier]) !== null && _d !== void 0 ? _d : config_1.MODEL_TIERS.small;
     if (!config_1.MODEL_TIERS[globalConfig.modelTier]) {
         console.log(`WARN  Unknown model tier '${globalConfig.modelTier}', falling back to 'small'`);
     }
     const embedModel = globalConfig.embedMode === "gpu"
-        ? ((_d = globalConfig.mlxModel) !== null && _d !== void 0 ? _d : tier.mlxModel)
+        ? ((_e = globalConfig.mlxModel) !== null && _e !== void 0 ? _e : tier.mlxModel)
         : tier.onnxModel;
     if (!opts.agent) {
         console.log(`\nEmbed mode: ${globalConfig.embedMode} | Model tier: ${globalConfig.modelTier} (${tier.vectorDim}d)`);
@@ -448,7 +464,7 @@ exports.doctor = new commander_1.Command("doctor")
                     body: JSON.stringify({ texts: ["gmax health check"] }),
                 });
                 const embedData = yield embedRes.json();
-                const dim = (_e = (_b = (_a = embedData === null || embedData === void 0 ? void 0 : embedData.vectors) === null || _a === void 0 ? void 0 : _a[0]) === null || _b === void 0 ? void 0 : _b.length) !== null && _e !== void 0 ? _e : 0;
+                const dim = (_f = (_b = (_a = embedData === null || embedData === void 0 ? void 0 : embedData.vectors) === null || _a === void 0 ? void 0 : _a[0]) === null || _b === void 0 ? void 0 : _b.length) !== null && _f !== void 0 ? _f : 0;
                 const ms = Date.now() - start;
                 const expectedDim = tier.vectorDim || 384;
                 if (dim === expectedDim) {
@@ -475,7 +491,7 @@ exports.doctor = new commander_1.Command("doctor")
     // caller most likely to be inside the sandbox this check is about.
     const sandbox = checkClaudeSandbox({
         home: os.homedir(),
-        projectRoot: (_f = (0, project_root_1.findProjectRoot)(process.cwd())) !== null && _f !== void 0 ? _f : process.cwd(),
+        projectRoot: (_g = (0, project_root_1.findProjectRoot)(process.cwd())) !== null && _g !== void 0 ? _g : process.cwd(),
     });
     if (sandbox) {
         if (opts.agent) {
@@ -594,7 +610,7 @@ exports.doctor = new commander_1.Command("doctor")
                         ? "LOW"
                         : "ok";
         }
-        catch (_p) { }
+        catch (_q) { }
         const staleChunkerProjects = projects.filter((p) => { var _a; return p.status === "indexed" &&
             ((_a = p.chunkerVersion) !== null && _a !== void 0 ? _a : 1) < config_1.CONFIG.CHUNKER_VERSION; });
         const staleEmbeddingProjects = projects.filter((p) => p.status === "indexed" &&
@@ -623,9 +639,9 @@ exports.doctor = new commander_1.Command("doctor")
                 `schema_dim=${physicalDim !== null && physicalDim !== void 0 ? physicalDim : "none"}`,
                 `schema_dim_ok=${schemaGap ? "false" : "true"}`,
                 `ann_index=${vectorIndex ? "present" : "absent"}`,
-                `ann_indexed=${(_g = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.numIndexedRows) !== null && _g !== void 0 ? _g : 0}`,
-                `ann_unindexed=${(_h = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.numUnindexedRows) !== null && _h !== void 0 ? _h : 0}`,
-                `ann_metric=${(_j = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.distanceType) !== null && _j !== void 0 ? _j : "none"}`,
+                `ann_indexed=${(_h = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.numIndexedRows) !== null && _h !== void 0 ? _h : 0}`,
+                `ann_unindexed=${(_j = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.numUnindexedRows) !== null && _j !== void 0 ? _j : 0}`,
+                `ann_metric=${(_k = vectorIndexStats === null || vectorIndexStats === void 0 ? void 0 : vectorIndexStats.distanceType) !== null && _k !== void 0 ? _k : "none"}`,
             ];
             console.log(fields.join("\t"));
             if (schemaGap) {
@@ -680,7 +696,7 @@ exports.doctor = new commander_1.Command("doctor")
                 console.log(`ok  Schema: vector table is ${physicalDim}d`);
             }
             if (vectorIndexStats) {
-                console.log(`ok  ANN: ${vectorIndexStats.numIndexedRows.toLocaleString()} indexed, ${vectorIndexStats.numUnindexedRows.toLocaleString()} unindexed, metric=${(_k = vectorIndexStats.distanceType) !== null && _k !== void 0 ? _k : "unknown"}`);
+                console.log(`ok  ANN: ${vectorIndexStats.numIndexedRows.toLocaleString()} indexed, ${vectorIndexStats.numUnindexedRows.toLocaleString()} unindexed, metric=${(_l = vectorIndexStats.distanceType) !== null && _l !== void 0 ? _l : "unknown"}`);
             }
             else {
                 console.log("INFO  ANN: vector index not built (set GMAX_ANN=1)");
@@ -809,7 +825,7 @@ exports.doctor = new commander_1.Command("doctor")
                         yield mc.close();
                     }
                 }
-                catch (_q) { }
+                catch (_r) { }
             }
         }
         // --fix auto-remediation
@@ -887,7 +903,7 @@ exports.doctor = new commander_1.Command("doctor")
                         const done = yield sendStreamingCommand({ cmd: "index", root: p.root, reset: true }, () => { }).catch((e) => ({ ok: false, error: String(e) }));
                         if (done.ok &&
                             (!("degraded" in done) || done.degraded !== true)) {
-                            const chunks = (_l = done.indexed) !== null && _l !== void 0 ? _l : 0;
+                            const chunks = (_m = done.indexed) !== null && _m !== void 0 ? _m : 0;
                             if (opts.agent) {
                                 console.log(`stale_chunker_reindexed\tname=${name}\tchunks=${chunks}`);
                             }
@@ -899,7 +915,7 @@ exports.doctor = new commander_1.Command("doctor")
                         else if (!opts.agent) {
                             const degraded = "degraded" in done && done.degraded === true;
                             const reason = degraded
-                                ? `${(_m = ("scanErrors" in done ? done.scanErrors : 0)) !== null && _m !== void 0 ? _m : 0} scan errors, ${(_o = ("failedFiles" in done ? done.failedFiles : 0)) !== null && _o !== void 0 ? _o : 0} file failures`
+                                ? `${(_o = ("scanErrors" in done ? done.scanErrors : 0)) !== null && _o !== void 0 ? _o : 0} scan errors, ${(_p = ("failedFiles" in done ? done.failedFiles : 0)) !== null && _p !== void 0 ? _p : 0} file failures`
                                 : done.error;
                             console.log(`FAIL  ${name}: reindex failed (${reason})`);
                         }

package/dist/commands/search-output.js

@@ -210,9 +210,11 @@ function renderSearchOutput(params) {
         var _a, _b, _c;
         var _d, _e, _f, _g, _h, _j;
         const { searchResult, options, minScore, crossProject, pattern, effectiveRoot, projectRoot, vectorDb, precomputedSkeletons, precomputedGraph, indexState, } = params;
-        if (!options.agent && ((_a = searchResult.warnings) === null || _a === void 0 ? void 0 : _a.length)) {
+        if ((_a = searchResult.warnings) === null || _a === void 0 ? void 0 : _a.length) {
             for (const w of searchResult.warnings) {
-                console.warn(`Warning: ${w}`);
+                console.warn(options.agent
+                    ? `warn\t${w.replace(/[\r\n\t]/g, " ")}`
+                    : `Warning: ${w}`);
             }
         }
         // Partial-index signal (Phase 6): when the index is mid-catchup, results

package/dist/commands/search-run.js

@@ -53,6 +53,7 @@ const sync_helpers_1 = require("../lib/index/sync-helpers");
 const syncer_1 = require("../lib/index/syncer");
 const per_file_1 = require("../lib/search/per-file");
 const searcher_1 = require("../lib/search/searcher");
+const setup_helpers_1 = require("../lib/setup/setup-helpers");
 const vector_db_1 = require("../lib/store/vector-db");
 const lock_1 = require("../lib/utils/lock");
 const project_registry_1 = require("../lib/utils/project-registry");
@@ -160,6 +161,8 @@ function runSearch(params) {
             // In-process fallback: open VectorDB, ensure index, run Searcher.
             // Only entered when the daemon path didn't produce results.
             if (!searchResult) {
+                // A daemon read needs no client-side model download or loading.
+                yield (0, setup_helpers_1.ensureSetup)();
                 const vectorDb = new vector_db_1.VectorDB(paths.lancedbDir);
                 openedDb = vectorDb;
                 // Check for active indexing lock and warn if present

package/dist/commands/search.js

@@ -46,7 +46,6 @@ exports.search = void 0;
 const path = __importStar(require("node:path"));
 const commander_1 = require("commander");
 const per_file_1 = require("../lib/search/per-file");
-const setup_helpers_1 = require("../lib/setup/setup-helpers");
 const cross_project_1 = require("../lib/utils/cross-project");
 const exit_1 = require("../lib/utils/exit");
 const path_containment_1 = require("../lib/utils/path-containment");
@@ -238,7 +237,6 @@ Examples:
             return;
     }
     try {
-        yield (0, setup_helpers_1.ensureSetup)();
         let checkRoot = cwdProjectRoot;
         if (options.root) {
             const resolved = resolvedOptionRoot !== undefined

package/dist/commands/status.js

@@ -79,12 +79,13 @@ function loadStatusView(projects) {
             daemon: () => (0, daemon_client_1.sendDaemonCommand)({ cmd: "status" }),
             render: (resp) => __awaiter(this, void 0, void 0, function* () {
                 var _a;
+                var _b;
                 const watchers = new Map();
                 const entries = Array.isArray(resp.projects) ? resp.projects : [];
                 const health = new Map();
                 for (const entry of entries) {
                     if (entry && typeof entry.root === "string") {
-                        watchers.set(entry.root, { status: (_a = entry.status) !== null && _a !== void 0 ? _a : "watching" });
+                        watchers.set(entry.root, { status: (_b = entry.status) !== null && _b !== void 0 ? _b : "watching" });
                         if (entry.indexState)
                             health.set(entry.root, entry.indexState);
                     }
@@ -94,15 +95,21 @@ function loadStatusView(projects) {
                 // the in-process path does when the LanceDB query fails.
                 const chunkCounts = new Map();
                 for (const project of projects) {
+                    if (((_a = resp.service) === null || _a === void 0 ? void 0 : _a.mode) === "paused")
+                        break;
                     const stats = yield (0, daemon_client_1.sendDaemonCommand)({ cmd: "project-stats", root: project.root }, { timeoutMs: 30000 });
                     if (stats.ok && typeof stats.chunks === "number") {
                         chunkCounts.set(project.root, stats.chunks);
                     }
                 }
-                const daemon = Object.assign(Object.assign(Object.assign({}, (resp.compaction !== undefined
+                const daemon = Object.assign(Object.assign(Object.assign(Object.assign({}, (resp.compaction !== undefined
                     ? { compaction: resp.compaction }
                     : {})), (resp.resources !== undefined
                     ? { resources: resp.resources }
+                    : {})), (resp.service
+                    ? {
+                        service: resp.service,
+                    }
                     : {})), { pid: typeof resp.pid === "number" ? resp.pid : null, uptimeSec: typeof resp.uptime === "number" ? resp.uptime : null, 
                     // Older daemons do not report these.
                     workers: typeof resp.workers === "number" ? resp.workers : null, workerThreads: resp.workerThreads &&
@@ -207,9 +214,9 @@ function buildStatusJson(input) {
             ? ((_c = input.countWorkers) !== null && _c !== void 0 ? _c : countWorkerProcesses)(d.pid)
             : null);
     }
-    return Object.assign(Object.assign({}, (input.stores ? { stores: input.stores } : {})), { daemon: Object.assign(Object.assign(Object.assign(Object.assign({ running: d !== undefined }, (input.startupBlockedReason != null
+    return Object.assign(Object.assign({}, (input.stores ? { stores: input.stores } : {})), { daemon: Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ running: d !== undefined }, (input.startupBlockedReason != null
             ? { startupBlockedReason: input.startupBlockedReason }
-            : {})), { pid: (_d = d === null || d === void 0 ? void 0 : d.pid) !== null && _d !== void 0 ? _d : null, since: (d === null || d === void 0 ? void 0 : d.uptimeSec) != null ? now - d.uptimeSec * 1000 : null, workerThreads: (_e = d === null || d === void 0 ? void 0 : d.workerThreads) !== null && _e !== void 0 ? _e : null }), ((d === null || d === void 0 ? void 0 : d.resources) !== undefined ? { resources: d.resources } : {})), ((d === null || d === void 0 ? void 0 : d.compaction) !== undefined ? { compaction: d.compaction } : {})), settings: {
+            : {})), { pid: (_d = d === null || d === void 0 ? void 0 : d.pid) !== null && _d !== void 0 ? _d : null, since: (d === null || d === void 0 ? void 0 : d.uptimeSec) != null ? now - d.uptimeSec * 1000 : null, workerThreads: (_e = d === null || d === void 0 ? void 0 : d.workerThreads) !== null && _e !== void 0 ? _e : null }), ((d === null || d === void 0 ? void 0 : d.service) ? { service: d.service } : {})), ((d === null || d === void 0 ? void 0 : d.resources) !== undefined ? { resources: d.resources } : {})), ((d === null || d === void 0 ? void 0 : d.compaction) !== undefined ? { compaction: d.compaction } : {})), settings: {
             embedMode: globalConfig.embedMode,
             modelTier: globalConfig.modelTier,
             vectorDim: globalConfig.vectorDim,
@@ -266,8 +273,8 @@ Examples:
   gmax status --json       The same, plus daemon and settings, as JSON
 `)
     .action((opts) => __awaiter(void 0, void 0, void 0, function* () {
-    var _a, _b;
-    var _c, _d, _e, _f, _g, _h, _j;
+    var _a, _b, _c, _d;
+    var _e, _f, _g, _h, _j, _k, _l, _m;
     const globalConfig = (0, index_config_1.readGlobalConfig)();
     const projects = (0, project_registry_1.listProjects)();
     const indexing = (0, lock_1.isLocked)(config_1.PATHS.globalRoot);
@@ -308,7 +315,13 @@ Examples:
         // Header
         console.log(`\n${style.bold("gmax")} · ${globalConfig.modelTier} (${globalConfig.vectorDim}d, ${globalConfig.embedMode})${indexing ? style.yellow(" · indexing...") : ""}`);
     }
-    if (startupBlockedReason !== null) {
+    if (((_b = (_a = view.daemon) === null || _a === void 0 ? void 0 : _a.service) === null || _b === void 0 ? void 0 : _b.mode) === "paused") {
+        const reason = ((_e = view.daemon.service.reason) !== null && _e !== void 0 ? _e : "host pressure").replace(/[\r\n\t]/g, " ");
+        console.log(opts.agent
+            ? `daemon_service\tmode=paused\treason=${reason}`
+            : style.yellow(`Bounded reads available; indexing and embeddings paused: ${reason}`));
+    }
+    else if (startupBlockedReason !== null) {
         const reason = startupBlockedReason.replace(/[\r\n\t]/g, " ");
         console.log(opts.agent
             ? `daemon_startup\tblocked=true\treason=${reason}`
@@ -318,14 +331,14 @@ Examples:
         if (opts.agent) {
             console.log(`store\t${store.home}\t${store.state}\tprefixes=${store.prefixes.join(",")}${store.error ? `\terror=${store.error}` : ""}`);
             for (const project of store.projects)
-                console.log(`store_project\t${store.home}\t${project.name}\t${(_c = project.chunkCount) !== null && _c !== void 0 ? _c : 0}\t${(_d = project.status) !== null && _d !== void 0 ? _d : "indexed"}\tcounts=cached`);
+                console.log(`store_project\t${store.home}\t${project.name}\t${(_f = project.chunkCount) !== null && _f !== void 0 ? _f : 0}\t${(_g = project.status) !== null && _g !== void 0 ? _g : "indexed"}\tcounts=cached`);
         }
         else {
             console.log(`\nStore: ${shortenPath(store.home)} — ${store.state}${store.error ? ` (${store.error})` : ""}`);
             if (store.state === "offline")
                 console.log("  Connect the drive to list its projects.");
             for (const project of store.projects)
-                console.log(`  ${project.name}  ${formatChunks(project.chunkCount)} chunks (cached)  ${(_e = project.status) !== null && _e !== void 0 ? _e : "indexed"}`);
+                console.log(`  ${project.name}  ${formatChunks(project.chunkCount)} chunks (cached)  ${(_h = project.status) !== null && _h !== void 0 ? _h : "indexed"}`);
         }
     }
     if (projects.length === 0) {
@@ -342,9 +355,9 @@ Examples:
         for (const project of projects) {
             const st = projectState(project, watchers.get(project.root));
             const isCurrent = project.root === currentRoot;
-            const count = (_f = chunkCounts.get(project.root)) !== null && _f !== void 0 ? _f : project.chunkCount;
+            const count = (_j = chunkCounts.get(project.root)) !== null && _j !== void 0 ? _j : project.chunkCount;
             const identity = (0, embedding_status_1.projectEmbeddingStatus)(project, globalConfig);
-            console.log(`${project.name}\t${formatChunks(count)}\t${formatAge(project.lastIndexed)}\t${st}\tembedding=${identity.state}${isCurrent ? "\tcurrent" : ""}${((_a = view.health) === null || _a === void 0 ? void 0 : _a.get(project.root)) ? `\t${(_g = (0, index_state_footer_1.formatIndexStateFooter)(view.health.get(project.root), { agent: true })) !== null && _g !== void 0 ? _g : ""}` : ""}`);
+            console.log(`${project.name}\t${formatChunks(count)}\t${formatAge(project.lastIndexed)}\t${st}\tembedding=${identity.state}${isCurrent ? "\tcurrent" : ""}${((_c = view.health) === null || _c === void 0 ? void 0 : _c.get(project.root)) ? `\t${(_k = (0, index_state_footer_1.formatIndexStateFooter)(view.health.get(project.root), { agent: true })) !== null && _k !== void 0 ? _k : ""}` : ""}`);
         }
         const legacyNotice = (0, embedding_status_1.formatLegacyEmbeddingNotice)((0, embedding_status_1.countLegacyEmbeddingProjects)(projects, globalConfig), { agent: true });
         if (legacyNotice)
@@ -360,7 +373,7 @@ Examples:
         const watcher = watchers.get(project.root);
         // Status column
         let statusStr;
-        const projectStatus = (_h = project.status) !== null && _h !== void 0 ? _h : "indexed";
+        const projectStatus = (_l = project.status) !== null && _l !== void 0 ? _l : "indexed";
         if (projectStatus === "pending") {
             statusStr = style.yellow("pending");
         }
@@ -380,7 +393,7 @@ Examples:
             statusStr = style.dim("idle");
         }
         // Chunks column
-        const count = (_j = chunkCounts.get(project.root)) !== null && _j !== void 0 ? _j : project.chunkCount;
+        const count = (_m = chunkCounts.get(project.root)) !== null && _m !== void 0 ? _m : project.chunkCount;
         const chunks = `${formatChunks(count)} chunks`;
         // Age column
         const age = formatAge(project.lastIndexed);
@@ -389,7 +402,7 @@ Examples:
         const marker = isCurrent ? style.cyan(" ←") : "";
         const name = project.name.padEnd(nameWidth);
         console.log(`  ${name}  ${chunks.padEnd(12)}  ${age.padEnd(10)}  ${statusStr}  embedding:${embedding}${marker}`);
-        const health = (0, index_state_footer_1.formatIndexStateFooter)((_b = view.health) === null || _b === void 0 ? void 0 : _b.get(project.root), {
+        const health = (0, index_state_footer_1.formatIndexStateFooter)((_d = view.health) === null || _d === void 0 ? void 0 : _d.get(project.root), {
             agent: false,
         });
         if (health)

package/dist/commands/watch.js

@@ -72,12 +72,18 @@ exports.watch = new commander_1.Command("watch")
     .description("Start background file watcher for live reindexing")
     .option("-b, --background", "Run watcher in background and exit")
     .option("-d, --daemon", "Run as centralized daemon watching projects that active sessions hold")
+    .option("--read-only", "Serve bounded reads without indexing, models, or clearing quarantine")
     .option("-p, --path <dir>", "Directory to watch (defaults to project root)")
     .option("--no-idle-timeout", "Disable the 30-minute idle shutdown")
     .action((options) => __awaiter(void 0, void 0, void 0, function* () {
     var _a, _b;
+    if (options.readOnly && !options.daemon) {
+        console.error("gmax: --read-only requires --daemon");
+        process.exitCode = 2;
+        return;
+    }
     const safetyDenied = (0, autostart_1.daemonStartDeniedReason)();
-    if (safetyDenied !== null) {
+    if (safetyDenied !== null && !options.readOnly) {
         console.error(`gmax: ${safetyDenied}; preserving containment`);
         process.exitCode = 2;
         return;
@@ -114,6 +120,14 @@ exports.watch = new commander_1.Command("watch")
                 const cliVersion = JSON.parse(fs.readFileSync(path.join(__dirname, "../../package.json"), "utf-8")).version;
                 const resp = yield sendDaemonCommand({ cmd: "ping" });
                 if (resp.version && resp.version === cliVersion) {
+                    if (options.readOnly) {
+                        const paused = yield sendDaemonCommand({
+                            cmd: "pause",
+                            reason: "read-only service requested",
+                        });
+                        if (!paused.ok)
+                            throw new Error(String(paused.error));
+                    }
                     process.exit(0);
                 }
                 console.log(`Daemon version mismatch (${resp.version} → ${cliVersion}), restarting...`);
@@ -151,7 +165,9 @@ exports.watch = new commander_1.Command("watch")
             const { spawnDaemonProcess } = yield Promise.resolve().then(() => __importStar(require("../lib/utils/daemon-launcher")));
             let started;
             try {
-                started = yield spawnDaemonProcess();
+                started = options.readOnly
+                    ? yield spawnDaemonProcess({ readOnly: true })
+                    : yield spawnDaemonProcess();
             }
             catch (error) {
                 const message = error instanceof Error ? error.message : String(error);
@@ -195,7 +211,10 @@ exports.watch = new commander_1.Command("watch")
             console.error("[daemon] unhandledRejection:", reason);
         });
         try {
-            yield daemon.start();
+            if (options.readOnly)
+                yield daemon.start({ readOnly: true });
+            else
+                yield daemon.start();
         }
         catch (err) {
             const code = err === null || err === void 0 ? void 0 : err.code;