homegraph 1.1.3 → 1.4.1

package/dist/mcp/liveness-watchdog.d.ts

@@ -1,5 +1,12 @@
 /** Default: 60s — ~300× shorter than the 5h #850 wedge, far longer than any real main-thread block. */
 export declare const DEFAULT_WATCHDOG_TIMEOUT_MS = 60000;
+/**
+ * Hard cap on disk-progress deferral: after this many timeouts' worth of
+ * CONTINUOUS heartbeat silence the process is killed even if the watched files
+ * keep advancing (a wedge coinciding with unrelated file writes, or I/O hung
+ * beyond any legitimate statement). 10× the 60s default ⇒ 10 minutes.
+ */
+export declare const PROGRESS_CAP_MULTIPLIER = 10;
 /** Parse the timeout env, falling back to the default for missing/invalid values. */
 export declare function parseWatchdogTimeoutMs(raw: string | undefined, fallback?: number): number;
 /** Derive a heartbeat cadence that emits several beats inside the timeout window. */
@@ -8,11 +15,21 @@ export interface WatchdogHandle {
     /** Stop heartbeating and shut the watchdog child down. Idempotent. */
     stop(): void;
 }
+export interface WatchdogOptions {
+    /**
+     * Files whose size/mtime advancing counts as forward progress (the SQLite
+     * DB + `-wal` for an in-process indexer). With paths supplied, a silent
+     * timeout only kills when the files did NOT advance — see the header. Omit
+     * for pure heartbeat behavior (the daemon, whose main thread never runs
+     * long synchronous work).
+     */
+    progressPaths?: string[];
+}
 /**
  * Install the main-thread liveness watchdog for a long-lived process. Returns a
  * handle to stop it, or `null` when disabled or when the child can't be spawned
  * (degraded, never throws — a missing watchdog must never keep a process from
  * starting).
  */
-export declare function installMainThreadWatchdog(): WatchdogHandle | null;
+export declare function installMainThreadWatchdog(options?: WatchdogOptions): WatchdogHandle | null;
 //# sourceMappingURL=liveness-watchdog.d.ts.map

package/dist/mcp/liveness-watchdog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"liveness-watchdog.d.ts","sourceRoot":"","sources":["../../src/mcp/liveness-watchdog.ts"],"names":[],"mappings":"AAwCA,uGAAuG;AACvG,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAQlD,qFAAqF;AACrF,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,QAAQ,GAAE,MAAoC,GAC7C,MAAM,CAIR;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/D;AASD,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,IAAI,IAAI,IAAI,CAAC;CACd;AA2BD;;;;;GAKG;AACH,wBAAgB,yBAAyB,IAAI,cAAc,GAAG,IAAI,CA8DjE"}
+{"version":3,"file":"liveness-watchdog.d.ts","sourceRoot":"","sources":["../../src/mcp/liveness-watchdog.ts"],"names":[],"mappings":"AAwDA,uGAAuG;AACvG,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAQ1C,qFAAqF;AACrF,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,QAAQ,GAAE,MAAoC,GAC7C,MAAM,CAIR;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/D;AASD,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,IAAI,IAAI,IAAI,CAAC;CACd;AA8DD,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,GAAE,eAAoB,GAAG,cAAc,GAAG,IAAI,CAgE9F"}

package/dist/mcp/liveness-watchdog.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_WATCHDOG_TIMEOUT_MS = void 0;
+exports.PROGRESS_CAP_MULTIPLIER = exports.DEFAULT_WATCHDOG_TIMEOUT_MS = void 0;
 exports.parseWatchdogTimeoutMs = parseWatchdogTimeoutMs;
 exports.deriveCheckIntervalMs = deriveCheckIntervalMs;
 exports.installMainThreadWatchdog = installMainThreadWatchdog;
@@ -68,16 +68,39 @@ exports.installMainThreadWatchdog = installMainThreadWatchdog;
  * orphan).
  *
  * **Won't fire on real work.** Heavy parsing runs in the parse worker
- * (off-thread) and indexing shells out to a child process, so the daemon's main
- * thread only ever does fast, bounded work. The default timeout is ~300× the
- * 5h #850 wedge shorter, yet far longer than any legitimate main-thread block.
- * Opt out with `HOMEGRAPH_NO_WATCHDOG=1`; tune with `HOMEGRAPH_WATCHDOG_TIMEOUT_MS`.
+ * (off-thread) and the daemon's indexing shells out to a child process, so the
+ * daemon's main thread only ever does fast, bounded work. The default timeout
+ * is ~300× the 5h #850 wedge shorter, yet far longer than any legitimate
+ * main-thread block. Opt out with `HOMEGRAPH_NO_WATCHDOG=1`; tune with
+ * `HOMEGRAPH_WATCHDOG_TIMEOUT_MS`.
+ *
+ * **Disk-progress deferral (`progressPaths`).** The CLI `index`/`init` path is
+ * different: it runs the SQLite store on this thread, and one long synchronous
+ * statement on severely degraded storage can block the loop past the timeout
+ * with the process perfectly healthy (#1231: killed a valid index on a
+ * 150-IOPS disk). Heartbeat silence alone cannot tell that apart from a wedge —
+ * but the disk can: a wedged CPU loop makes no forward progress on the DB
+ * files, while a slow store advances them. When the caller supplies
+ * `progressPaths` (the SQLite DB + `-wal`), the child checks them at each
+ * silent timeout: size/mtime advanced ⇒ defer the kill and keep watching;
+ * unchanged ⇒ kill as before. Deferral is bounded by a hard cap
+ * (`PROGRESS_CAP_MULTIPLIER` × timeout) of continuous silence, so a wedge
+ * coinciding with unrelated file activity — or I/O hung beyond all reason —
+ * still dies. A true wedge with no disk progress dies at the base timeout,
+ * exactly as before.
  */
 const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const child_process_1 = require("child_process");
 /** Default: 60s — ~300× shorter than the 5h #850 wedge, far longer than any real main-thread block. */
 exports.DEFAULT_WATCHDOG_TIMEOUT_MS = 60_000;
+/**
+ * Hard cap on disk-progress deferral: after this many timeouts' worth of
+ * CONTINUOUS heartbeat silence the process is killed even if the watched files
+ * keep advancing (a wedge coinciding with unrelated file writes, or I/O hung
+ * beyond any legitimate statement). 10× the 60s default ⇒ 10 minutes.
+ */
+exports.PROGRESS_CAP_MULTIPLIER = 10;
 /** `true` for `1/true/yes/on` (case-insensitive); `false` otherwise. */
 function isEnvTruthy(raw) {
     if (!raw)
@@ -115,15 +138,50 @@ const CHILD_SOURCE = `
 const fs = require('fs');
 const parentPid = Number(process.argv[1]);
 const timeoutMs = Number(process.argv[2]);
+const capMs = Number(process.argv[3]);
+const progressPaths = process.argv.slice(4);
 const secs = Math.round(timeoutMs / 1000);
-const MSG = Buffer.from('[HomeGraph] Main thread unresponsive for ~' + secs + 's — killing the wedged process so a fresh one can start (#850). Disable with HOMEGRAPH_NO_WATCHDOG=1.\\n');
-function kill() {
-  try { fs.writeSync(2, MSG); } catch (e) {}
+function kill(extra) {
+  try { fs.writeSync(2, Buffer.from('[HomeGraph] Main thread unresponsive for ~' + secs + 's' + (extra || '') + ' — killing the wedged process so a fresh one can start (#850). Disable with HOMEGRAPH_NO_WATCHDOG=1.\\n')); } catch (e) {}
   try { process.kill(parentPid, 'SIGKILL'); } catch (e) {}
   process.exit(0);
 }
-let timer = setTimeout(kill, timeoutMs);
-process.stdin.on('data', () => { clearTimeout(timer); timer = setTimeout(kill, timeoutMs); });
+// Fingerprint of the watched files (size + mtime). A change between checks is
+// forward disk progress — a slow synchronous SQLite statement, not a wedge.
+function snap() {
+  let s = '';
+  for (const p of progressPaths) {
+    try { const st = fs.statSync(p); s += st.size + ':' + st.mtimeMs + ';'; } catch (e) { s += 'x;'; }
+  }
+  return s;
+}
+let lastSnap = progressPaths.length ? snap() : '';
+let lastSnapAt = Date.now();
+let silentSince = null; // start of the current continuous-silence episode
+function onTimeout() {
+  if (!progressPaths.length) return kill('');
+  const now = Date.now();
+  if (silentSince === null) silentSince = now - timeoutMs; // silence began ~one timeout ago
+  const cur = snap();
+  if (cur !== lastSnap && now - silentSince < capMs) {
+    // The event loop is blocked but the DB files are advancing: a legitimate
+    // long store on slow storage. Defer, re-baseline, keep watching.
+    lastSnap = cur;
+    timer = setTimeout(onTimeout, timeoutMs);
+    return;
+  }
+  kill(cur !== lastSnap ? ' despite ongoing disk activity (hard cap ' + Math.round(capMs / 1000) + 's reached)' : '');
+}
+let timer = setTimeout(onTimeout, timeoutMs);
+process.stdin.on('data', () => {
+  silentSince = null;
+  // Keep the baseline fresh while healthy (throttled — a stat per second).
+  if (progressPaths.length) {
+    const t = Date.now();
+    if (t - lastSnapAt >= 1000) { lastSnap = snap(); lastSnapAt = t; }
+  }
+  clearTimeout(timer); timer = setTimeout(onTimeout, timeoutMs);
+});
 process.stdin.on('end', () => process.exit(0));   // parent closed the pipe (exited) -> no orphan
 process.stdin.on('error', () => process.exit(0)); // pipe broke -> parent gone
 process.stdin.resume();
@@ -134,17 +192,19 @@ process.stdin.resume();
  * (degraded, never throws — a missing watchdog must never keep a process from
  * starting).
  */
-function installMainThreadWatchdog() {
+function installMainThreadWatchdog(options = {}) {
     if (isEnvTruthy(process.env.HOMEGRAPH_NO_WATCHDOG))
         return null;
     const timeoutMs = parseWatchdogTimeoutMs(process.env.HOMEGRAPH_WATCHDOG_TIMEOUT_MS);
     const checkMs = deriveCheckIntervalMs(timeoutMs);
+    const capMs = timeoutMs * exports.PROGRESS_CAP_MULTIPLIER;
+    const progressPaths = options.progressPaths ?? [];
     let child;
     try {
         // No execArgv inheritance (unlike Worker), so the child carries none of our
         // V8 flags — it runs no WASM and needs none. stderr inherits the parent's
         // fd 2 so the kill notice lands wherever the parent logs (daemon.log).
-        child = (0, child_process_1.spawn)(process.execPath, ['-e', CHILD_SOURCE, String(process.pid), String(timeoutMs)], {
+        child = (0, child_process_1.spawn)(process.execPath, ['-e', CHILD_SOURCE, String(process.pid), String(timeoutMs), String(capMs), ...progressPaths], {
             stdio: ['pipe', 'ignore', 'inherit'],
             windowsHide: true,
             // The watchdog touches no files; keep its cwd off the project/temp dir
@@ -185,7 +245,7 @@ function installMainThreadWatchdog() {
         stdin.unref?.();
     }
     catch { /* ignore */ }
-    debug(`armed (child pid ${child.pid ?? '?'}): timeoutMs=${timeoutMs} checkMs=${checkMs}`);
+    debug(`armed (child pid ${child.pid ?? '?'}): timeoutMs=${timeoutMs} checkMs=${checkMs} progressPaths=${progressPaths.length}`);
     let stopped = false;
     return {
         stop() {

package/dist/mcp/liveness-watchdog.js.map

@@ -1 +1 @@
-{"version":3,"file":"liveness-watchdog.js","sourceRoot":"","sources":["../../src/mcp/liveness-watchdog.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,wDAOC;AAGD,sDAEC;AA6CD,8DA8DC;AAzKD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,uCAAyB;AACzB,uCAAyB;AACzB,iDAAoD;AAEpD,uGAAuG;AAC1F,QAAA,2BAA2B,GAAG,MAAM,CAAC;AAElD,wEAAwE;AACxE,SAAS,WAAW,CAAC,GAAuB;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,qFAAqF;AACrF,SAAgB,sBAAsB,CACpC,GAAuB,EACvB,WAAmB,mCAA2B;IAE9C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpD,CAAC;AAED,qFAAqF;AACrF,SAAgB,qBAAqB,CAAC,SAAiB;IACrD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,2EAA2E;AAC3E,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QACpC,IAAI,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;CAgBpB,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,yBAAyB;IACvC,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhE,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAEjD,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,4EAA4E;QAC5E,0EAA0E;QAC1E,uEAAuE;QACvE,KAAK,GAAG,IAAA,qBAAK,EACX,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,EAC5D;YACE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;YACpC,WAAW,EAAE,IAAI;YACjB,uEAAuE;YACvE,mEAAmE;YACnE,uBAAuB;YACvB,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE;SACjB,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC7C,IAAI,CAAC;YAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,6EAA6E;IAC7E,mEAAmE;IACnE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAsD,CAAC,CAAC,CAAC;IAChF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAEjE,8EAA8E;IAC9E,6EAA6E;IAC7E,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,IAAI,CAAC;YAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,EAAE,OAAO,CAAC,CAAC;IACZ,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,6EAA6E;IAC7E,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,IAAI,CAAC;QAAE,KAA2C,CAAC,KAAK,EAAE,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAEtF,KAAK,CAAC,oBAAoB,KAAK,CAAC,GAAG,IAAI,GAAG,gBAAgB,SAAS,YAAY,OAAO,EAAE,CAAC,CAAC;IAE1F,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO;QACL,IAAI;YACF,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,IAAI,CAAC;gBAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,6BAA6B;YACzE,IAAI,CAAC;gBAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB;QACrE,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"liveness-watchdog.js","sourceRoot":"","sources":["../../src/mcp/liveness-watchdog.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0EA,wDAOC;AAGD,sDAEC;AA2FD,8DAgEC;AAjPD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,uCAAyB;AACzB,uCAAyB;AACzB,iDAAoD;AAEpD,uGAAuG;AAC1F,QAAA,2BAA2B,GAAG,MAAM,CAAC;AAElD;;;;;GAKG;AACU,QAAA,uBAAuB,GAAG,EAAE,CAAC;AAE1C,wEAAwE;AACxE,SAAS,WAAW,CAAC,GAAuB;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,qFAAqF;AACrF,SAAgB,sBAAsB,CACpC,GAAuB,EACvB,WAAmB,mCAA2B;IAE9C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpD,CAAC;AAED,qFAAqF;AACrF,SAAgB,qBAAqB,CAAC,SAAiB;IACrD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,2EAA2E;AAC3E,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QACpC,IAAI,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDpB,CAAC;AAaF;;;;;GAKG;AACH,SAAgB,yBAAyB,CAAC,UAA2B,EAAE;IACrE,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhE,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,SAAS,GAAG,+BAAuB,CAAC;IAClD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;IAElD,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,4EAA4E;QAC5E,0EAA0E;QAC1E,uEAAuE;QACvE,KAAK,GAAG,IAAA,qBAAK,EACX,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,aAAa,CAAC,EAC7F;YACE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;YACpC,WAAW,EAAE,IAAI;YACjB,uEAAuE;YACvE,mEAAmE;YACnE,uBAAuB;YACvB,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE;SACjB,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC7C,IAAI,CAAC;YAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,6EAA6E;IAC7E,mEAAmE;IACnE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAsD,CAAC,CAAC,CAAC;IAChF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAEjE,8EAA8E;IAC9E,6EAA6E;IAC7E,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,IAAI,CAAC;YAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,EAAE,OAAO,CAAC,CAAC;IACZ,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,6EAA6E;IAC7E,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,IAAI,CAAC;QAAE,KAA2C,CAAC,KAAK,EAAE,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAEtF,KAAK,CAAC,oBAAoB,KAAK,CAAC,GAAG,IAAI,GAAG,gBAAgB,SAAS,YAAY,OAAO,kBAAkB,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;IAEhI,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO;QACL,IAAI;YACF,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,IAAI,CAAC;gBAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,6BAA6B;YACzE,IAAI,CAAC;gBAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB;QACrE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/mcp/memory-budget.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Process-wide RSS budget for the HomeGraph MCP / daemon process.
+ *
+ * Large indexes (~hundreds of MB SQLite) + catch-up sync (tree-sitter re-parse)
+ * + unbounded callers/explore graphs previously pushed a single Node process
+ * into multi-GB RSS. Agents measure the parent process tree, so that shows up
+ * as ~5GB "peaks". Cap the HomeGraph process itself so *no* query or background
+ * path can quietly grow without bound.
+ *
+ * Override with `HOMEGRAPH_MAX_RSS_MB` (clamped 256–4096). Default 1024.
+ */
+export declare function resolveMaxRssMb(): number;
+export declare function getProcessRssMb(): number;
+export declare function isOverRssBudget(maxMb?: number): boolean;
+/** Soft tripwire — stop growing (catch-up etc.) before the hard tool refusal. */
+export declare function isNearRssBudget(maxMb?: number): boolean;
+export declare function rssBudgetPartialText(context?: string): string;
+export declare function rssBudgetPartialResult(context?: string): {
+    content: Array<{
+        type: 'text';
+        text: string;
+    }>;
+    isError: false;
+};
+/**
+ * MCP catch-up sync re-scans + may re-parse dirty files — the multi-GB path on
+ * large indexes. Skip unless explicitly forced.
+ */
+export declare function shouldSkipCatchUpSync(dbPath: string | null | undefined): boolean;
+//# sourceMappingURL=memory-budget.d.ts.map

package/dist/mcp/memory-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-budget.d.ts","sourceRoot":"","sources":["../../src/mcp/memory-budget.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAWH,wBAAgB,eAAe,IAAI,MAAM,CAMxC;AAED,wBAAgB,eAAe,IAAI,MAAM,CAMxC;AAED,wBAAgB,eAAe,CAAC,KAAK,GAAE,MAA0B,GAAG,OAAO,CAE1E;AAED,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,KAAK,GAAE,MAA0B,GAAG,OAAO,CAE1E;AAED,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAU7D;AAED,wBAAgB,sBAAsB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG;IACxD,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,EAAE,KAAK,CAAC;CAChB,CAKA;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAahF"}

package/dist/mcp/memory-budget.js

@@ -0,0 +1,123 @@
+"use strict";
+/**
+ * Process-wide RSS budget for the HomeGraph MCP / daemon process.
+ *
+ * Large indexes (~hundreds of MB SQLite) + catch-up sync (tree-sitter re-parse)
+ * + unbounded callers/explore graphs previously pushed a single Node process
+ * into multi-GB RSS. Agents measure the parent process tree, so that shows up
+ * as ~5GB "peaks". Cap the HomeGraph process itself so *no* query or background
+ * path can quietly grow without bound.
+ *
+ * Override with `HOMEGRAPH_MAX_RSS_MB` (clamped 256–4096). Default 1024.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveMaxRssMb = resolveMaxRssMb;
+exports.getProcessRssMb = getProcessRssMb;
+exports.isOverRssBudget = isOverRssBudget;
+exports.isNearRssBudget = isNearRssBudget;
+exports.rssBudgetPartialText = rssBudgetPartialText;
+exports.rssBudgetPartialResult = rssBudgetPartialResult;
+exports.shouldSkipCatchUpSync = shouldSkipCatchUpSync;
+const fs = __importStar(require("fs"));
+const DEFAULT_MAX_RSS_MB = 1024;
+const MIN_MAX_RSS_MB = 256;
+const MAX_MAX_RSS_MB = 4096;
+/** Index files at/above this size skip MCP catch-up sync unless forced. */
+const LARGE_INDEX_SKIP_CATCHUP_BYTES = 64 * 1024 * 1024;
+function resolveMaxRssMb() {
+    const raw = process.env.HOMEGRAPH_MAX_RSS_MB;
+    if (raw === undefined || raw === '')
+        return DEFAULT_MAX_RSS_MB;
+    const n = Number(raw);
+    if (!Number.isFinite(n) || n <= 0)
+        return DEFAULT_MAX_RSS_MB;
+    return Math.min(MAX_MAX_RSS_MB, Math.max(MIN_MAX_RSS_MB, Math.floor(n)));
+}
+function getProcessRssMb() {
+    try {
+        return process.memoryUsage().rss / (1024 * 1024);
+    }
+    catch {
+        return 0;
+    }
+}
+function isOverRssBudget(maxMb = resolveMaxRssMb()) {
+    return getProcessRssMb() >= maxMb;
+}
+/** Soft tripwire — stop growing (catch-up etc.) before the hard tool refusal. */
+function isNearRssBudget(maxMb = resolveMaxRssMb()) {
+    return getProcessRssMb() >= maxMb * 0.7;
+}
+function rssBudgetPartialText(context) {
+    const max = resolveMaxRssMb();
+    const now = Math.round(getProcessRssMb());
+    const where = context ? ` (${context})` : '';
+    return (`⚠️ **Partial result** — HomeGraph hit its process memory budget ` +
+        `(~${now}MB RSS, limit ${max}MB)${where}. This is NOT an error. ` +
+        `Retry ONE tighter \`homegraph_explore\` / \`homegraph_callers\` with a concrete ` +
+        `symbol name — do not fan out dozens of caller lookups, and do not grep the same symbols.`);
+}
+function rssBudgetPartialResult(context) {
+    return {
+        content: [{ type: 'text', text: rssBudgetPartialText(context) }],
+        isError: false,
+    };
+}
+/**
+ * MCP catch-up sync re-scans + may re-parse dirty files — the multi-GB path on
+ * large indexes. Skip unless explicitly forced.
+ */
+function shouldSkipCatchUpSync(dbPath) {
+    const force = process.env.HOMEGRAPH_FORCE_CATCHUP_SYNC;
+    if (force === '1' || force === 'true' || force === 'yes')
+        return false;
+    const skip = process.env.HOMEGRAPH_SKIP_CATCHUP_SYNC;
+    if (skip === '1' || skip === 'true' || skip === 'yes')
+        return true;
+    if (isNearRssBudget())
+        return true;
+    if (!dbPath)
+        return false;
+    try {
+        if (fs.statSync(dbPath).size >= LARGE_INDEX_SKIP_CATCHUP_BYTES)
+            return true;
+    }
+    catch {
+        /* missing — allow catch-up attempt */
+    }
+    return false;
+}
+//# sourceMappingURL=memory-budget.js.map

package/dist/mcp/memory-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-budget.js","sourceRoot":"","sources":["../../src/mcp/memory-budget.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWH,0CAMC;AAED,0CAMC;AAED,0CAEC;AAGD,0CAEC;AAED,oDAUC;AAED,wDAQC;AAMD,sDAaC;AAzED,uCAAyB;AAEzB,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,2EAA2E;AAC3E,MAAM,8BAA8B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAExD,SAAgB,eAAe;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC7C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,kBAAkB,CAAC;IAC/D,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAC7D,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAgB,eAAe;IAC7B,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAgB,eAAe,CAAC,QAAgB,eAAe,EAAE;IAC/D,OAAO,eAAe,EAAE,IAAI,KAAK,CAAC;AACpC,CAAC;AAED,iFAAiF;AACjF,SAAgB,eAAe,CAAC,QAAgB,eAAe,EAAE;IAC/D,OAAO,eAAe,EAAE,IAAI,KAAK,GAAG,GAAG,CAAC;AAC1C,CAAC;AAED,SAAgB,oBAAoB,CAAC,OAAgB;IACnD,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,OAAO,CACL,kEAAkE;QAClE,KAAK,GAAG,iBAAiB,GAAG,MAAM,KAAK,0BAA0B;QACjE,kFAAkF;QAClF,0FAA0F,CAC3F,CAAC;AACJ,CAAC;AAED,SAAgB,sBAAsB,CAAC,OAAgB;IAIrD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,MAAiC;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;IACvD,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACvE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACrD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,eAAe,EAAE;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,8BAA8B;YAAE,OAAO,IAAI,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/mcp/ppid-watchdog.d.ts

@@ -41,4 +41,22 @@ export interface SupervisionState {
  * supervisor and should shut down, or null while it is still supervised.
  */
 export declare function supervisionLostReason(state: SupervisionState): string | null;
+/** Default PPID poll cadence (ms). Shared by the MCP server and CLI commands. */
+export declare const DEFAULT_PPID_POLL_MS = 5000;
+/**
+ * Resolve the PPID watchdog poll interval from an env override
+ * (`CODEGRAPH_PPID_POLL_MS`). A value of `0` disables the watchdog entirely
+ * (escape hatch for embedded scenarios where the parent legitimately re-parents
+ * the process on purpose). Anything non-numeric or negative falls back to the
+ * default.
+ */
+export declare function parsePpidPollMs(raw: string | undefined): number;
+/**
+ * Parse the host PID propagated across the `--liftoff-only` re-exec
+ * (`CODEGRAPH_HOST_PPID`). Returns a positive integer PID, or null when
+ * unset/invalid — the direct-launch path, where the watchdog falls back to
+ * `process.ppid` divergence. PIDs of 0/1 are rejected (0 = unknown, 1 = init,
+ * i.e. already orphaned), so the watchdog doesn't latch onto init.
+ */
+export declare function parseHostPpid(raw: string | undefined): number | null;
 //# sourceMappingURL=ppid-watchdog.d.ts.map

package/dist/mcp/ppid-watchdog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ppid-watchdog.d.ts","sourceRoot":"","sources":["../../src/mcp/ppid-watchdog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,+EAA+E;IAC/E,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAClC,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAmB5E"}
+{"version":3,"file":"ppid-watchdog.d.ts","sourceRoot":"","sources":["../../src/mcp/ppid-watchdog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,+EAA+E;IAC/E,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAClC,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAmB5E;AAED,iFAAiF;AACjF,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAM/D;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAKpE"}

package/dist/mcp/ppid-watchdog.js

@@ -1,6 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_PPID_POLL_MS = void 0;
 exports.supervisionLostReason = supervisionLostReason;
+exports.parsePpidPollMs = parsePpidPollMs;
+exports.parseHostPpid = parseHostPpid;
 /**
  * Returns a human-readable reason string when the process has lost its
  * supervisor and should shut down, or null while it is still supervised.
@@ -24,4 +27,38 @@ function supervisionLostReason(state) {
     }
     return null;
 }
+/** Default PPID poll cadence (ms). Shared by the MCP server and CLI commands. */
+exports.DEFAULT_PPID_POLL_MS = 5000;
+/**
+ * Resolve the PPID watchdog poll interval from an env override
+ * (`CODEGRAPH_PPID_POLL_MS`). A value of `0` disables the watchdog entirely
+ * (escape hatch for embedded scenarios where the parent legitimately re-parents
+ * the process on purpose). Anything non-numeric or negative falls back to the
+ * default.
+ */
+function parsePpidPollMs(raw) {
+    if (raw === undefined || raw === '')
+        return exports.DEFAULT_PPID_POLL_MS;
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed))
+        return exports.DEFAULT_PPID_POLL_MS;
+    if (parsed < 0)
+        return exports.DEFAULT_PPID_POLL_MS;
+    return Math.floor(parsed);
+}
+/**
+ * Parse the host PID propagated across the `--liftoff-only` re-exec
+ * (`CODEGRAPH_HOST_PPID`). Returns a positive integer PID, or null when
+ * unset/invalid — the direct-launch path, where the watchdog falls back to
+ * `process.ppid` divergence. PIDs of 0/1 are rejected (0 = unknown, 1 = init,
+ * i.e. already orphaned), so the watchdog doesn't latch onto init.
+ */
+function parseHostPpid(raw) {
+    if (raw === undefined || raw === '')
+        return null;
+    const parsed = Number(raw);
+    if (!Number.isInteger(parsed) || parsed <= 1)
+        return null;
+    return parsed;
+}
 //# sourceMappingURL=ppid-watchdog.js.map

package/dist/mcp/ppid-watchdog.js.map

@@ -1 +1 @@
-{"version":3,"file":"ppid-watchdog.js","sourceRoot":"","sources":["../../src/mcp/ppid-watchdog.ts"],"names":[],"mappings":";;AA2CA,sDAmBC;AAvBD;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,KAAuB;IAC3D,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAEpD,8EAA8E;IAC9E,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,QAAQ,YAAY,OAAO,WAAW,EAAE,CAAC;IAClD,CAAC;IACD,yEAAyE;IACzE,2EAA2E;IAC3E,0DAA0D;IAC1D,IAAI,QAAQ,KAAK,OAAO,IAAI,YAAY,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACvE,OAAO,cAAc,YAAY,SAAS,CAAC;IAC7C,CAAC;IACD,uEAAuE;IACvE,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,OAAO,YAAY,QAAQ,SAAS,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"ppid-watchdog.js","sourceRoot":"","sources":["../../src/mcp/ppid-watchdog.ts"],"names":[],"mappings":";;;AA2CA,sDAmBC;AAYD,0CAMC;AASD,sCAKC;AAvDD;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,KAAuB;IAC3D,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAEpD,8EAA8E;IAC9E,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,QAAQ,YAAY,OAAO,WAAW,EAAE,CAAC;IAClD,CAAC;IACD,yEAAyE;IACzE,2EAA2E;IAC3E,0DAA0D;IAC1D,IAAI,QAAQ,KAAK,OAAO,IAAI,YAAY,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACvE,OAAO,cAAc,YAAY,SAAS,CAAC;IAC7C,CAAC;IACD,uEAAuE;IACvE,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,OAAO,YAAY,QAAQ,SAAS,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACpE,QAAA,oBAAoB,GAAG,IAAI,CAAC;AAEzC;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,GAAuB;IACrD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,4BAAoB,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,4BAAoB,CAAC;IAC1D,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,4BAAoB,CAAC;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,GAAuB;IACnD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/mcp/proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/mcp/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAE3B,OAAO,EAAqB,WAAW,EAAwB,MAAM,UAAU,CAAC;AAQhF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAc1C;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAK9E;AAED,MAAM,WAAW,WAAW;IAC1B;;;;;OAKG;IACH,OAAO,EAAE,SAAS,GAAG,iBAAiB,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,QAAQ,CAC5B,UAAU,EAAE,MAAM,EAClB,eAAe,GAAE,MAAgC,GAChD,OAAO,CAAC,WAAW,CAAC,CAqCtB;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,eAAe,GAAE,MAAgC,GAChD,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAAC,CAgCjD;AAsBD;+DAC+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC;yFACqF;IACrF,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9C;6EACyE;IACzE,UAAU,IAAI,SAAS,CAAC;IACxB,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiLpF"}
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/mcp/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAE3B,OAAO,EAAqB,WAAW,EAAwB,MAAM,UAAU,CAAC;AAWhF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAc1C;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAK9E;AAED,MAAM,WAAW,WAAW;IAC1B;;;;;OAKG;IACH,OAAO,EAAE,SAAS,GAAG,iBAAiB,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,QAAQ,CAC5B,UAAU,EAAE,MAAM,EAClB,eAAe,GAAE,MAAgC,GAChD,OAAO,CAAC,WAAW,CAAC,CAqCtB;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,eAAe,GAAE,MAAgC,GAChD,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAAC,CAgCjD;AAsBD;+DAC+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC;yFACqF;IACrF,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9C;6EACyE;IACzE,UAAU,IAAI,SAAS,CAAC;IACxB,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4PpF"}

package/dist/mcp/proxy.js

@@ -60,12 +60,15 @@ const fs = __importStar(require("fs"));
 const net = __importStar(require("net"));
 const wasm_runtime_flags_1 = require("../extraction/wasm-runtime-flags");
 const daemon_1 = require("./daemon");
+const early_ppid_1 = require("./early-ppid");
 const ppid_watchdog_1 = require("./ppid-watchdog");
+const startup_handshake_1 = require("./startup-handshake");
 const stdin_teardown_1 = require("./stdin-teardown");
 const version_1 = require("./version");
 const session_1 = require("./session");
 const server_instructions_1 = require("./server-instructions");
 const tools_1 = require("./tools");
+const query_pool_1 = require("./query-pool");
 const telemetry_1 = require("../telemetry");
 /** Default poll cadence for the PPID watchdog (same as the direct server). */
 const DEFAULT_PPID_POLL_MS = 5000;
@@ -183,7 +186,7 @@ function sendClientHello(socket) {
     const clientHello = {
         homegraph_client: 1,
         pid: process.pid,
-        hostPid: parseHostPpid(process.env[wasm_runtime_flags_1.HOST_PPID_ENV]) ?? process.ppid,
+        hostPid: parseHostPpid(process.env[wasm_runtime_flags_1.HOST_PPID_ENV]) ?? early_ppid_1.EARLY_PPID,
     };
     try {
         socket.write(JSON.stringify(clientHello) + '\n');
@@ -220,6 +223,11 @@ async function runLocalHandshakeProxy(deps) {
     // new session starts), these would otherwise hang forever; we re-serve them
     // in-process so the host always gets a reply.
     const inflight = new Map();
+    // tools/call forwarded to the daemon that hit the proxy-side deadline.
+    // Late daemon replies for these ids are dropped so the client isn't confused
+    // by a second response after it already got Partial (or timed out itself).
+    const timedOutToolIds = new Set();
+    const toolDeadlineTimers = new Map();
     const trackInflight = (line) => {
         try {
             const m = JSON.parse(line);
@@ -235,10 +243,56 @@ async function runLocalHandshakeProxy(deps) {
         }
         catch { /* host gone */ }
     };
+    /** Proxy-side deadline — daemon wedging must not become empty client `-32001`. */
+    const armToolCallDeadline = (id) => {
+        if (id === undefined || id === null)
+            return;
+        const prev = toolDeadlineTimers.get(id);
+        if (prev)
+            clearTimeout(prev);
+        const deadlineMs = (0, query_pool_1.resolveToolDeadlineMs)();
+        const timer = setTimeout(() => {
+            toolDeadlineTimers.delete(id);
+            if (!inflight.has(id))
+                return; // already answered
+            inflight.delete(id);
+            timedOutToolIds.add(id);
+            const secs = Math.max(1, Math.round(deadlineMs / 1000));
+            writeClient({
+                jsonrpc: '2.0',
+                id,
+                result: {
+                    content: [{
+                            type: 'text',
+                            text: `⚠️ **Partial result** — HomeGraph did not finish within ${secs}s (daemon busy or wedged). ` +
+                                `This is NOT an error. Retry ONE \`homegraph_explore\` with concrete symbol/file names — ` +
+                                `do not stack search+explore, and do not grep symbols you already named.`,
+                        }],
+                    isError: false,
+                },
+            });
+        }, deadlineMs);
+        toolDeadlineTimers.set(id, timer);
+    };
+    const clearToolCallDeadline = (id) => {
+        const t = toolDeadlineTimers.get(id);
+        if (t) {
+            clearTimeout(t);
+            toolDeadlineTimers.delete(id);
+        }
+        if (timedOutToolIds.has(id)) {
+            timedOutToolIds.delete(id);
+            return 'already-timed-out';
+        }
+        return 'ok';
+    };
     const shutdown = () => {
         if (shuttingDown)
             return;
         shuttingDown = true;
+        for (const t of toolDeadlineTimers.values())
+            clearTimeout(t);
+        toolDeadlineTimers.clear();
         try {
             daemonSocket?.destroy();
         }
@@ -291,6 +345,8 @@ async function runLocalHandshakeProxy(deps) {
     const routeToDaemon = (line) => {
         if (daemonStatus === 'ready' && daemonSocket) {
             trackInflight(line);
+            if (process.env.HOMEGRAPH_MCP_DEBUG)
+                process.stderr.write(`[mcp-debug] proxy->daemon ${line.slice(0, 80)}\n`);
             try {
                 daemonSocket.write(line.endsWith('\n') ? line : line + '\n');
             }
@@ -300,6 +356,8 @@ async function runLocalHandshakeProxy(deps) {
             void handleLocally(line);
         }
         else {
+            if (process.env.HOMEGRAPH_MCP_DEBUG)
+                process.stderr.write(`[mcp-debug] proxy-buffer(${daemonStatus}) ${line.slice(0, 80)}\n`);
             pending.push(line);
         }
     };
@@ -331,7 +389,7 @@ async function runLocalHandshakeProxy(deps) {
                         version: typeof initParams.clientInfo.version === 'string' ? initParams.clientInfo.version : undefined,
                     };
                 }
-                writeClient({ jsonrpc: '2.0', id: msg.id, result: { protocolVersion: session_1.PROTOCOL_VERSION, capabilities: { tools: {} }, serverInfo: session_1.SERVER_INFO, instructions: server_instructions_1.SERVER_INSTRUCTIONS } });
+                writeClient({ jsonrpc: '2.0', id: msg.id, result: { protocolVersion: session_1.PROTOCOL_VERSION, capabilities: { tools: {} }, serverInfo: session_1.SERVER_INFO, instructions: (0, session_1.initializeInstructions)(server_instructions_1.SERVER_INSTRUCTIONS) } });
                 routeToDaemon(line); // prime the daemon so it resolves the project (its reply is suppressed below)
             }
             else if (msg.method === 'tools/list') {
@@ -349,6 +407,9 @@ async function runLocalHandshakeProxy(deps) {
                 writeClient({ jsonrpc: '2.0', id: msg.id, result: { prompts: [] } });
             }
             else {
+                if (msg.method === 'tools/call' && msg.id !== undefined) {
+                    armToolCallDeadline(msg.id);
+                }
                 routeToDaemon(line);
             }
         }
@@ -359,6 +420,16 @@ async function runLocalHandshakeProxy(deps) {
     // busy-spinning the event loop (#799).
     (0, stdin_teardown_1.treatStdinFailureAsShutdown)(shutdown);
     startPpidWatchdogNoSocket(shutdown);
+    // Backstop for a launch abandoned before any of the above can see it: killed
+    // launcher + held-open pipes + reparent that beat the EARLY_PPID capture
+    // (#1185). A server that never receives a single byte isn't serving anyone.
+    // Armed after the stdin 'data' consumer above so no bytes are emitted while
+    // only the backstop's listener exists.
+    (0, startup_handshake_1.armStartupHandshakeTimeout)(() => {
+        process.stderr.write('[HomeGraph MCP] No MCP traffic since startup; assuming an abandoned launch and shutting down (#1185). ' +
+            'Tune with HOMEGRAPH_STARTUP_HANDSHAKE_TIMEOUT_MS (0 disables).\n');
+        shutdown();
+    });
     // ---- daemon connection (background) ----
     let socket = null;
     try {
@@ -388,7 +459,12 @@ async function runLocalHandshakeProxy(deps) {
                     resp = JSON.parse(line);
                 }
                 catch { /* not JSON — relay verbatim */ }
+                if (process.env.HOMEGRAPH_MCP_DEBUG)
+                    process.stderr.write(`[mcp-debug] daemon->proxy ${line.slice(0, 80)}\n`);
                 if (resp && resp.id !== undefined && ('result' in resp || 'error' in resp)) {
+                    if (clearToolCallDeadline(resp.id) === 'already-timed-out') {
+                        continue; // client already got Partial from the proxy deadline
+                    }
                     inflight.delete(resp.id); // answered — no longer in flight
                     // Suppress the daemon's reply to the initialize we forwarded to prime it
                     // (the client already got the local handshake response).
@@ -422,6 +498,8 @@ async function runLocalHandshakeProxy(deps) {
         socket.on('error', onDaemonLost);
         for (const line of pending) {
             trackInflight(line);
+            if (process.env.HOMEGRAPH_MCP_DEBUG)
+                process.stderr.write(`[mcp-debug] proxy-flush ${line.slice(0, 80)}\n`);
             try {
                 socket.write(line + '\n');
             }
@@ -445,7 +523,10 @@ function startPpidWatchdogNoSocket(onDeath) {
     const pollMs = parsePollMs(process.env.HOMEGRAPH_PPID_POLL_MS);
     if (pollMs <= 0)
         return;
-    const originalPpid = process.ppid;
+    // Baseline from the CLI entry's earliest capture, not process.ppid here —
+    // a launcher killed during our first ~100ms would otherwise leave the
+    // baseline at 1 and blind the divergence check forever (#1185).
+    const originalPpid = early_ppid_1.EARLY_PPID;
     const hostPpid = parseHostPpid(process.env[wasm_runtime_flags_1.HOST_PPID_ENV]);
     const timer = setInterval(() => {
         const reason = (0, ppid_watchdog_1.supervisionLostReason)({
@@ -588,7 +669,10 @@ function startPpidWatchdog(socket) {
     const pollMs = parsePollMs(process.env.HOMEGRAPH_PPID_POLL_MS);
     if (pollMs <= 0)
         return;
-    const originalPpid = process.ppid;
+    // Baseline from the CLI entry's earliest capture, not process.ppid here —
+    // a launcher killed during our first ~100ms would otherwise leave the
+    // baseline at 1 and blind the divergence check forever (#1185).
+    const originalPpid = early_ppid_1.EARLY_PPID;
     const hostPpid = parseHostPpid(process.env[wasm_runtime_flags_1.HOST_PPID_ENV]);
     const timer = setInterval(() => {
         const reason = (0, ppid_watchdog_1.supervisionLostReason)({