@rubytech/create-maxy-code 0.1.392 → 0.1.394

package/dist/__tests__/launchd-bootstrap.test.js

@@ -0,0 +1,85 @@
+// acceptance grid for launchd-bootstrap.ts (Task 1401).
+//
+// Locks the darwin session-manager bootstrap contract: bootout (idempotent,
+// rc 3 "No such process" ignored) then bootstrap, with a bounded retry on
+// exit 5 ("Input/output error" — a known transient/racey launchctl failure on
+// re-install). Pure logic — the launchctl runner and the retry sleep are both
+// injected, so no real launchctl or wall-clock delay runs here.
+//
+// Compiles to dist/__tests__/launchd-bootstrap.test.js so
+// `node --test dist/__tests__/*.test.js` picks it up after build.
+import test from "node:test";
+import assert from "node:assert/strict";
+import { bootstrapLaunchAgent } from "../launchd-bootstrap.js";
+const OPTS = { gui: "gui/502", label: "com.rubytech.host-claude-session-manager", plistPath: "/tmp/sm.plist" };
+const noSleep = () => { };
+test("first bootstrap succeeds — one bootout, one bootstrap, attempts=1", () => {
+    const calls = [];
+    const run = (args) => {
+        calls.push(args);
+        return args[0] === "bootstrap" ? { status: 0, stderr: "" } : { status: 3, stderr: "No such process" };
+    };
+    const r = bootstrapLaunchAgent(run, { ...OPTS, sleepFn: noSleep });
+    assert.equal(r.ok, true);
+    assert.equal(r.attempts, 1);
+    assert.deepEqual(calls[0], ["bootout", "gui/502/com.rubytech.host-claude-session-manager"]);
+    assert.deepEqual(calls[1], ["bootstrap", "gui/502", "/tmp/sm.plist"]);
+    assert.equal(calls.length, 2);
+});
+test("exit 5 twice then 0 — retries and reports the winning attempt", () => {
+    let bootstraps = 0;
+    const sleeps = [];
+    const run = (args) => {
+        if (args[0] !== "bootstrap")
+            return { status: 3, stderr: "No such process" };
+        bootstraps += 1;
+        return bootstraps < 3 ? { status: 5, stderr: "Bootstrap failed: 5: Input/output error" } : { status: 0, stderr: "" };
+    };
+    const r = bootstrapLaunchAgent(run, { ...OPTS, sleepFn: (ms) => { sleeps.push(ms); } });
+    assert.equal(r.ok, true);
+    assert.equal(r.attempts, 3);
+    assert.equal(bootstraps, 3);
+    assert.equal(sleeps.length, 2); // slept before each of the two retries
+});
+test("exit 5 on every attempt — fails after the attempt cap, not before", () => {
+    let bootstraps = 0;
+    const run = (args) => {
+        if (args[0] !== "bootstrap")
+            return { status: 3, stderr: "No such process" };
+        bootstraps += 1;
+        return { status: 5, stderr: "Bootstrap failed: 5: Input/output error" };
+    };
+    const r = bootstrapLaunchAgent(run, { ...OPTS, maxAttempts: 3, sleepFn: noSleep });
+    assert.equal(r.ok, false);
+    assert.equal(r.attempts, 3);
+    assert.equal(r.bootstrapStatus, 5);
+    assert.equal(bootstraps, 3);
+});
+test("non-5 non-zero bootstrap aborts immediately — no retry", () => {
+    let bootstraps = 0;
+    const run = (args) => {
+        if (args[0] !== "bootstrap")
+            return { status: 3, stderr: "No such process" };
+        bootstraps += 1;
+        return { status: 9, stderr: "some other launchd failure" };
+    };
+    const r = bootstrapLaunchAgent(run, { ...OPTS, maxAttempts: 3, sleepFn: noSleep });
+    assert.equal(r.ok, false);
+    assert.equal(r.attempts, 1);
+    assert.equal(r.bootstrapStatus, 9);
+    assert.equal(bootstraps, 1);
+});
+test("emits one structured log line per attempt with bootout and bootstrap rc", () => {
+    let bootstraps = 0;
+    const lines = [];
+    const run = (args) => {
+        if (args[0] !== "bootstrap")
+            return { status: 3, stderr: "No such process" };
+        bootstraps += 1;
+        return bootstraps < 2 ? { status: 5, stderr: "eio" } : { status: 0, stderr: "" };
+    };
+    bootstrapLaunchAgent(run, { ...OPTS, sleepFn: noSleep, logger: (l) => lines.push(l) });
+    assert.equal(lines.length, 2);
+    assert.match(lines[0], /agent=com\.rubytech\.host-claude-session-manager bootout=3 bootstrap=5 attempt=1/);
+    assert.match(lines[1], /bootout=3 bootstrap=0 attempt=2/);
+});

package/dist/__tests__/launchd-plist.test.js

@@ -10,7 +10,7 @@
 // package so `node --test dist/__tests__/*.test.js` picks it up after build.
 import test from "node:test";
 import assert from "node:assert/strict";
-import { renderPlist, buildSessionManagerWrapper } from "../launchd-plist.js";
+import { renderPlist, buildSessionManagerWrapper, buildHeartbeatWrapper } from "../launchd-plist.js";
 // ---------------------------------------------------------------------------
 // Standard render — every required field present, no escaping needed.
 // ---------------------------------------------------------------------------
@@ -213,6 +213,46 @@ test("buildSessionManagerWrapper sources .env and execs the manager", () => {
     assert.match(w, /cd "\/Users\/x\/maxy-code\/platform\/services\/claude-session-manager"/);
     assert.match(w, /exec \/usr\/local\/bin\/node dist\/index\.js\n$/);
 });
+// ---------------------------------------------------------------------------
+// StartInterval — the darwin heartbeat timer (Task 1403). Emitted as
+// <integer> only when set; absent from the standard server/manager plists.
+// ---------------------------------------------------------------------------
+test("renderPlist emits StartInterval as <integer> when set", () => {
+    const xml = renderPlist({
+        label: "com.rubytech.maxy-code-heartbeat",
+        programArguments: ["/bin/bash", "/Users/x/.maxy-code/heartbeat-wrapper.sh"],
+        stdoutPath: "/Users/x/.maxy-code/logs/check-due-events.log",
+        stderrPath: "/Users/x/.maxy-code/logs/check-due-events.log",
+        keepAlive: false,
+        runAtLoad: false,
+        startInterval: 60,
+    });
+    assert.match(xml, /<key>StartInterval<\/key>\s*<integer>60<\/integer>/);
+    assert.match(xml, /<key>KeepAlive<\/key>\s*<false\/>/);
+    assert.match(xml, /<key>RunAtLoad<\/key>\s*<false\/>/);
+});
+test("renderPlist omits StartInterval key when absent (standard plists unchanged)", () => {
+    const xml = renderPlist({
+        label: "com.rubytech.maxy-code",
+        programArguments: ["/bin/bash", "/Users/x/.maxy-code/launchd-wrapper.sh"],
+        stdoutPath: "/dev/null",
+        stderrPath: "/dev/null",
+        keepAlive: true,
+        runAtLoad: true,
+    });
+    assert.ok(!/StartInterval/.test(xml), "StartInterval must not appear when omitted");
+});
+test("buildHeartbeatWrapper sources .env, exports PLATFORM_ROOT, execs the tick", () => {
+    const w = buildHeartbeatWrapper({
+        envPath: "/Users/x/.maxy-code/.env",
+        installDir: "/Users/x/maxy-code",
+        nodeBin: "/opt/homebrew/bin/node",
+    });
+    assert.match(w, /^#!\/bin\/bash\n/);
+    assert.match(w, /set -a; \[ -f "\/Users\/x\/\.maxy-code\/\.env" \] && \. "\/Users\/x\/\.maxy-code\/\.env"; set \+a/);
+    assert.match(w, /export PLATFORM_ROOT="\/Users\/x\/maxy-code\/platform"/);
+    assert.match(w, /exec \/opt\/homebrew\/bin\/node \/Users\/x\/maxy-code\/platform\/plugins\/scheduling\/mcp\/dist\/scripts\/check-due-events\.js\n$/);
+});
 test("session-manager plist renders bash wrapper as sole ProgramArguments", () => {
     const xml = renderPlist({
         label: "com.rubytech.maxy-code-claude-session-manager",

package/dist/index.js

@@ -16,7 +16,8 @@ import { requireSupportedPlatform, detectPlatform } from "./platform-detect.js";
 import { decideClaudeUpgradePrivilege } from "./claude-upgrade-privilege.js";
 import { resolveNeo4jDataDir } from "./neo4j-datadir.js";
 import { protectCommands, unprotectCommands, lsattrShowsImmutable } from "./install-immutability.js";
-import { renderPlist, buildSessionManagerWrapper } from "./launchd-plist.js";
+import { renderPlist, buildSessionManagerWrapper, buildHeartbeatWrapper } from "./launchd-plist.js";
+import { bootstrapLaunchAgent } from "./launchd-bootstrap.js";
 import { enumerateClaudeCandidates, pickCanonicalClaude } from "./claude-bin.js";
 import { installAllBrewPackages } from "./brew-install.js";
 import { parseSwVers, isSupportedMacosVersion } from "./macos-version.js";
@@ -1898,7 +1899,16 @@ function capOllamaServiceCpu() {
 function installOllama(embedModel) {
     if (!commandExists("ollama")) {
         log("5", TOTAL, "Installing Ollama...");
-        spawnSync("bash", ["-c", "curl -fsSL https://ollama.ai/install.sh | sh"], { stdio: "inherit" });
+        // The upstream curl|sh installer only places a Linux systemd daemon; on
+        // darwin it leaves no `ollama` CLI, so ensureOllamaServing()'s `ollama serve`
+        // spawn would fail. Install via Homebrew instead, mirroring installNeo4j /
+        // installCloudflared (Task 1403).
+        if (requireSupportedPlatform(process.platform) === "darwin") {
+            installAllBrewPackages(["ollama"], logFile);
+        }
+        else {
+            spawnSync("bash", ["-c", "curl -fsSL https://ollama.ai/install.sh | sh"], { stdio: "inherit" });
+        }
     }
     else {
         log("5", TOTAL, "Ollama already installed.");
@@ -3300,6 +3310,15 @@ function installServiceDarwin() {
             `setupAccount() (setup-account.sh) should have created one. Refusing to write .env ` +
             `without ACCOUNT_ID; the boot validator would FATAL on every kickstart.`);
     }
+    // Resolve node once, up front: the launchd wrapper execs it (below) and the
+    // .env pins it as NODE_BIN so the session-manager's per-session channel MCP
+    // descriptors invoke node by absolute path. The bare launchd PATH excludes an
+    // nvm node, so a bare `node` command in an MCP descriptor fails to spawn and
+    // the channel never boots (Task 1402). Intel `/usr/local/bin/node`, Apple
+    // Silicon `/opt/homebrew/bin/node`, or nvm's versioned path — whatever the
+    // installer's own shell resolves.
+    const nodeProbe = spawnSync("command", ["-v", "node"], { encoding: "utf-8", shell: true });
+    const nodeBin = (nodeProbe.stdout ?? "").trim() || "/usr/local/bin/node";
     const envPath = join(persistDir, ".env");
     try {
         let envContent = "";
@@ -3350,8 +3369,19 @@ function installServiceDarwin() {
             else
                 envContent = envContent.trimEnd() + (envContent.length > 0 ? "\n" : "") + `CLAUDE_BIN=${canonicalClaude}\n`;
         }
+        // Task 1402 — pin the resolved node the same way. The session-manager reads
+        // NODE_BIN and stamps it as the `command` of every per-session channel MCP
+        // descriptor, so a webchat/WhatsApp/Telegram channel spawns node by absolute
+        // path instead of a bare `node` the launchd PATH can't resolve.
+        {
+            const re = /^NODE_BIN=.*$/m;
+            if (re.test(envContent))
+                envContent = envContent.replace(re, `NODE_BIN=${nodeBin}`);
+            else
+                envContent = envContent.trimEnd() + (envContent.length > 0 ? "\n" : "") + `NODE_BIN=${nodeBin}\n`;
+        }
         writeFileSync(envPath, envContent);
-        logFile(`  .env: DISPLAY_MODE=${DISPLAY_MODE}, EMBED_MODEL=${EMBED_MODEL}, EMBED_DIMENSIONS=${EMBED_DIMS}, NEO4J_URI=bolt://localhost:${NEO4J_PORT}, PORT=${PORT}, MAXY_UI_INTERNAL_PORT=${PORT} (darwin-collapsed), CLAUDE_SESSION_MANAGER_PORT=${BRAND.claudeSessionManagerPort}, HOSTNAME=0.0.0.0, ACCOUNT_ID=${installAccountId.slice(0, 8)}…, CLAUDE_CONFIG_DIR=${persistDir}/.claude, CLAUDE_BIN=${canonicalClaude ?? "unresolved(PATH)"}`);
+        logFile(`  .env: DISPLAY_MODE=${DISPLAY_MODE}, EMBED_MODEL=${EMBED_MODEL}, EMBED_DIMENSIONS=${EMBED_DIMS}, NEO4J_URI=bolt://localhost:${NEO4J_PORT}, PORT=${PORT}, MAXY_UI_INTERNAL_PORT=${PORT} (darwin-collapsed), CLAUDE_SESSION_MANAGER_PORT=${BRAND.claudeSessionManagerPort}, HOSTNAME=0.0.0.0, ACCOUNT_ID=${installAccountId.slice(0, 8)}…, CLAUDE_CONFIG_DIR=${persistDir}/.claude, CLAUDE_BIN=${canonicalClaude ?? "unresolved(PATH)"}, NODE_BIN=${nodeBin}`);
     }
     catch (err) {
         console.error(`  WARNING: failed to write .env to ${envPath}: ${err instanceof Error ? err.message : String(err)}`);
@@ -3361,11 +3391,7 @@ function installServiceDarwin() {
     // in the child env. Without this, ProgramArguments executes node directly
     // and the .env values are unread — server binds the wrong port.
     const wrapperPath = join(persistDir, "launchd-wrapper.sh");
-    // Resolve node binary at install time so the wrapper picks the right
-    // path on both Intel (/usr/local/bin/node) and Apple Silicon
-    // (/opt/homebrew/bin/node) — Homebrew's prefix differs by arch.
-    const nodeProbe = spawnSync("command", ["-v", "node"], { encoding: "utf-8", shell: true });
-    const nodeBin = (nodeProbe.stdout ?? "").trim() || "/usr/local/bin/node";
+    // `nodeBin` resolved once above (also pinned as NODE_BIN in .env).
     const wrapperBody = [
         "#!/bin/bash",
         "# generated by create-maxy installService(). Reads.env then",
@@ -3441,21 +3467,28 @@ function installServiceDarwin() {
     });
     writeFileSync(smPlistPath, smPlist);
     logFile(`  ${smPlistPath} written (${smPlist.length} bytes)`);
-    spawnSync("launchctl", ["bootout", `${gui()}/${smLabel}`], { stdio: "pipe" });
-    const smBootstrap = spawnSync("launchctl", ["bootstrap", gui(), smPlistPath], {
-        stdio: "pipe",
-        encoding: "utf-8",
-        timeout: 15_000,
+    // Task 1401 — `launchctl bootstrap` intermittently returns exit 5 ("Input/
+    // output error") on a re-install even when the label is not loaded (its
+    // bootout returns 3). A single bare bootstrap aborted phase 11 on that first
+    // EIO; bootstrapLaunchAgent bootout-then-bootstraps with a bounded retry on
+    // exit 5, so a transient failure that clears on retry no longer fails install.
+    const smBoot = bootstrapLaunchAgent((args) => {
+        const r = spawnSync("launchctl", args, { stdio: "pipe", encoding: "utf-8", timeout: 15_000 });
+        return { status: r.status, stderr: (r.stderr ?? "").toString() };
+    }, {
+        gui: gui(),
+        label: smLabel,
+        plistPath: smPlistPath,
+        logger: (line) => { console.log(`  ${line}`); logFile(`  ${line}`); },
     });
-    if (smBootstrap.status === 0) {
+    if (smBoot.ok) {
         console.log(`  [launchd] bootstrap ${gui()}/${smLabel} ok`);
-        logFile(`  [create-maxy] launchd-plist=${smLabel} loaded=true`);
+        logFile(`  [create-maxy] launchd-plist=${smLabel} loaded=true attempts=${smBoot.attempts}`);
     }
     else {
-        const smStderr = (smBootstrap.stderr ?? "").trim();
-        console.error(`  [launchd] bootstrap ${smLabel} returned ${smBootstrap.status}: ${smStderr}`);
-        logFile(`  [create-maxy] launchd-plist=${smLabel} loaded=false exit=${smBootstrap.status}`);
-        throw new Error(`launchctl bootstrap ${smLabel} failed (exit ${smBootstrap.status}): ${smStderr}`);
+        console.error(`  [launchd] bootstrap ${smLabel} returned ${smBoot.bootstrapStatus} after ${smBoot.attempts} attempt(s): ${smBoot.stderr}`);
+        logFile(`  [create-maxy] launchd-plist=${smLabel} loaded=false exit=${smBoot.bootstrapStatus} attempts=${smBoot.attempts}`);
+        throw new Error(`launchctl bootstrap ${smLabel} failed (exit ${smBoot.bootstrapStatus}) after ${smBoot.attempts} attempt(s): ${smBoot.stderr}`);
     }
     // Health-probe the manager (/healthz) so a silent boot failure surfaces at
     // install time, not at first session spawn as `manager-unreachable`.
@@ -3473,6 +3506,45 @@ function installServiceDarwin() {
     if (!smUp) {
         console.log(`  Session manager not yet healthy on ${BRAND.claudeSessionManagerPort} — check ${join(logsDir, "server.log")}.`);
     }
+    // Task 1403 — the scheduling heartbeat. On Linux a per-minute cron ticks
+    // check-due-events.js (installCrons/buildHeartbeatCronBlock); darwin has no
+    // cron and installCrons early-returns, so operator-created bookings would
+    // never dispatch. Author a StartInterval=60 LaunchAgent as the timer analogue:
+    // keepAlive=false (a periodic one-shot, not a supervised daemon). A bootstrap
+    // failure warns rather than aborting install — the server + manager (core
+    // function) are already up; scheduling retries on the next installer run.
+    const hbLabel = `${launchdLabel()}-heartbeat`;
+    const hbPlistPath = join(launchAgentsDir(), `${hbLabel}.plist`);
+    const hbWrapperPath = join(persistDir, "heartbeat-wrapper.sh");
+    writeFileSync(hbWrapperPath, buildHeartbeatWrapper({ envPath, installDir: INSTALL_DIR, nodeBin }));
+    chmodSync(hbWrapperPath, 0o755);
+    const hbPlist = renderPlist({
+        label: hbLabel,
+        programArguments: ["/bin/bash", hbWrapperPath],
+        stdoutPath: join(logsDir, "check-due-events.log"),
+        stderrPath: join(logsDir, "check-due-events.log"),
+        keepAlive: false,
+        runAtLoad: false,
+        startInterval: 60,
+    });
+    writeFileSync(hbPlistPath, hbPlist);
+    logFile(`  ${hbPlistPath} written (${hbPlist.length} bytes)`);
+    const hbBoot = bootstrapLaunchAgent((args) => {
+        const r = spawnSync("launchctl", args, { stdio: "pipe", encoding: "utf-8", timeout: 15_000 });
+        return { status: r.status, stderr: (r.stderr ?? "").toString() };
+    }, {
+        gui: gui(),
+        label: hbLabel,
+        plistPath: hbPlistPath,
+        logger: (line) => { console.log(`  ${line}`); logFile(`  ${line}`); },
+    });
+    if (hbBoot.ok) {
+        logFile(`  [create-maxy] launchd-plist=${hbLabel} loaded=true attempts=${hbBoot.attempts}`);
+    }
+    else {
+        console.error(`  WARNING: heartbeat LaunchAgent ${hbLabel} bootstrap returned ${hbBoot.bootstrapStatus} after ${hbBoot.attempts} attempt(s): ${hbBoot.stderr} — scheduling ticks will not fire until a re-install succeeds.`);
+        logFile(`  [create-maxy] launchd-plist=${hbLabel} loaded=false exit=${hbBoot.bootstrapStatus} attempts=${hbBoot.attempts}`);
+    }
     // Wait for the server to come up.
     console.log("  Waiting for web server...");
     let webServerUp = false;

package/dist/launchd-bootstrap.js

@@ -0,0 +1,57 @@
+// Task 1401 — darwin session-manager LaunchAgent bootstrap, made idempotent and
+// EIO-tolerant.
+//
+// `launchctl bootstrap` intermittently returns exit 5 ("Bootstrap failed: 5:
+// Input/output error") on a re-install even when the target label is not
+// loaded (a `bootout` of it returns 3, "No such process"). It is a known
+// transient/racey launchd failure: bootstrapping the same plist from a clean
+// state succeeds. The earlier phase-11 code issued a single bare `bootstrap`
+// and treated any non-zero exit as fatal, so one EIO aborted the whole install.
+//
+// This helper bootout-then-bootstraps with a bounded retry on exit 5. Both the
+// launchctl runner and the retry sleep are injected, so the logic is unit-tested
+// with no real launchctl and no wall-clock delay. Kept synchronous to match the
+// spawnSync-based installer body (installService is a synchronous `void`).
+/** `launchctl bootstrap` exit code for "Input/output error" — the transient,
+ *  racey failure this retry loop exists to absorb. */
+const BOOTSTRAP_EIO = 5;
+/** Blocking sleep with no imports, safe inside the synchronous installer. */
+function blockingSleep(ms) {
+    if (ms <= 0)
+        return;
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+export function bootstrapLaunchAgent(run, o) {
+    const maxAttempts = Math.max(1, o.maxAttempts ?? 3);
+    const retryDelayMs = o.retryDelayMs ?? 500;
+    const sleepFn = o.sleepFn ?? blockingSleep;
+    const log = o.logger ?? (() => { });
+    let attempt = 0;
+    let last = { status: null, stderr: "" };
+    for (attempt = 1; attempt <= maxAttempts; attempt++) {
+        // Idempotent: bootout any prior instance so the following bootstrap starts
+        // clean. rc 3 ("No such process") is the expected fresh case; it and any
+        // other bootout rc are ignored — bootout is cleanup, not the verified op.
+        const bootout = run(["bootout", `${o.gui}/${o.label}`]);
+        const bootstrap = run(["bootstrap", o.gui, o.plistPath]);
+        last = { status: bootstrap.status, stderr: (bootstrap.stderr ?? "").trim() };
+        log(`[launchd] agent=${o.label} bootout=${bootout.status ?? "null"} bootstrap=${bootstrap.status ?? "null"} attempt=${attempt}`);
+        if (bootstrap.status === 0) {
+            return { ok: true, attempts: attempt, bootstrapStatus: 0, stderr: last.stderr };
+        }
+        // Only exit 5 (EIO) is retried, and only while attempts remain. Every other
+        // non-zero status is a real failure that aborts now rather than burning the
+        // retry budget on a deterministic error.
+        if (bootstrap.status === BOOTSTRAP_EIO && attempt < maxAttempts) {
+            sleepFn(retryDelayMs);
+            continue;
+        }
+        break;
+    }
+    return {
+        ok: false,
+        attempts: Math.min(attempt, maxAttempts),
+        bootstrapStatus: last.status,
+        stderr: last.stderr,
+    };
+}

package/dist/launchd-plist.js

@@ -52,6 +52,29 @@ export function buildSessionManagerWrapper(o) {
         "",
     ].join("\n");
 }
+/**
+ * Bash wrapper for the darwin scheduling-heartbeat LaunchAgent (Task 1403).
+ * launchd's StartInterval timer is the analogue of the Linux per-minute cron
+ * (buildHeartbeatCronBlock) that ticks `check-due-events.js`. The wrapper
+ * sources the brand `.env` for NEO4J_URI + MAXY_UI_INTERNAL_PORT, exports
+ * PLATFORM_ROOT (the tick's own env contract, matching the cron line's
+ * `PLATFORM_ROOT=` prefix), and execs the tick once. launchd re-invokes it
+ * every StartInterval seconds; there is no long-running process to supervise.
+ */
+export function buildHeartbeatWrapper(o) {
+    const script = `${o.installDir}/platform/plugins/scheduling/mcp/dist/scripts/check-due-events.js`;
+    return [
+        "#!/bin/bash",
+        "# generated by create-maxy installServiceDarwin() — Task 1403 heartbeat.",
+        "# launchd StartInterval analogue of the Linux per-minute scheduling cron.",
+        "# Sources .env (NEO4J_URI, MAXY_UI_INTERNAL_PORT), exports PLATFORM_ROOT,",
+        "# execs one check-due-events.js tick.",
+        `set -a; [ -f "${o.envPath}" ] && . "${o.envPath}"; set +a`,
+        `export PLATFORM_ROOT="${o.installDir}/platform"`,
+        `exec ${o.nodeBin} ${script}`,
+        "",
+    ].join("\n");
+}
 export function renderPlist(spec) {
     const lines = [];
     lines.push(`<?xml version="1.0" encoding="UTF-8"?>`);
@@ -78,6 +101,10 @@ export function renderPlist(spec) {
     lines.push(`  ${spec.keepAlive ? "<true/>" : "<false/>"}`);
     lines.push(`  <key>RunAtLoad</key>`);
     lines.push(`  ${spec.runAtLoad ? "<true/>" : "<false/>"}`);
+    if (spec.startInterval !== undefined) {
+        lines.push(`  <key>StartInterval</key>`);
+        lines.push(`  <integer>${spec.startInterval}</integer>`);
+    }
     lines.push(`</dict>`);
     lines.push(`</plist>`);
     return lines.join("\n") + "\n";

package/dist/uninstall.js

@@ -78,8 +78,21 @@ function isDarwin() {
 function launchdLabel() {
     return `com.rubytech.${BRAND.hostname}`;
 }
+/** Every LaunchAgent label installServiceDarwin() creates for this brand: the
+ *  main server, the claude-session-manager (Task 1395), and the scheduling
+ *  heartbeat (Task 1403). Uninstall boots out and removes all three. */
+function darwinLaunchdLabels() {
+    return [
+        launchdLabel(),
+        `${launchdLabel()}-claude-session-manager`,
+        `${launchdLabel()}-heartbeat`,
+    ];
+}
+function plistPathFor(label) {
+    return resolve(HOME, "Library/LaunchAgents", `${label}.plist`);
+}
 function plistPath() {
-    return resolve(HOME, "Library/LaunchAgents", `${launchdLabel()}.plist`);
+    return plistPathFor(launchdLabel());
 }
 function gui() {
     const uid = typeof process.getuid === "function" ? process.getuid() : 0;
@@ -163,13 +176,18 @@ function peerBrandPresent() {
 // ---------------------------------------------------------------------------
 function stopServices() {
     log("1", "Stopping services...");
-    // darwin: bootout the LaunchAgent. bootout exits 0 on success,
-    // 113 ("Unknown service") when the agent isn't loaded — both are
+    // darwin: bootout every LaunchAgent this install created. bootout exits 0 on
+    // success, 113 ("Unknown service") when the agent isn't loaded — both are
     // acceptable end-states for "service stopped". The plist removal in
-    // removeSystemdService() finishes the cleanup.
+    // removeSystemdService() finishes the cleanup. Three labels share the brand
+    // prefix: the main server, the claude-session-manager (Task 1395), and the
+    // scheduling heartbeat (Task 1403). The latter two were previously never
+    // booted out on uninstall.
     if (isDarwin()) {
-        spawnSync("launchctl", ["bootout", `${gui()}/${launchdLabel()}`], { stdio: "pipe", timeout: 15_000 });
-        console.log(`  Booted out ${launchdLabel()}`);
+        for (const label of darwinLaunchdLabels()) {
+            spawnSync("launchctl", ["bootout", `${gui()}/${label}`], { stdio: "pipe", timeout: 15_000 });
+            console.log(`  Booted out ${label}`);
+        }
         return;
     }
     // Stop platform user service
@@ -465,6 +483,14 @@ function removeAppDirs() {
 // ---------------------------------------------------------------------------
 function removeNeo4jData() {
     log("5", "Removing Neo4j data...");
+    // This function's teardown is Linux-shaped: `sudo systemctl daemon-reload`
+    // and `sudo rm -rf /var/lib/neo4j/*`. On darwin that raises a spurious sudo
+    // prompt and logs a FAILED. Skip here (Task 1403); darwin Neo4j data teardown
+    // belongs to Task 1396 (dedicated Neo4j on darwin).
+    if (!isLinux()) {
+        console.log("  Not Linux — skipping.");
+        return;
+    }
     // Brand isolation: remove only THIS brand's Neo4j data. Shared
     // 7687 data is skipped entirely when a peer brand is present. Dedicated
     // branded instances live at /var/lib/neo4j-<hostname>/ and are always
@@ -666,24 +692,26 @@ function removeSystemConfig() {
 function removeSystemdService() {
     log("8", "Removing systemd service...");
     // darwin: bootout (idempotent — already done in stopServices,
-    // re-running is a no-op exit 113) and delete the plist. The wrapper
-    // shell script lives in CONFIG_DIR which step 4 (removeAppDirs) wipes,
-    // so no separate cleanup is needed.
+    // re-running is a no-op exit 113) and delete the plist for every LaunchAgent
+    // this brand created. The wrapper shell scripts live in CONFIG_DIR which
+    // step 4 (removeAppDirs) wipes, so no separate cleanup is needed.
     if (isDarwin()) {
-        spawnSync("launchctl", ["bootout", `${gui()}/${launchdLabel()}`], { stdio: "pipe", timeout: 15_000 });
-        const plist = plistPath();
-        if (existsSync(plist)) {
-            try {
-                rmSync(plist);
-                console.log(`  Removed ${plist}`);
+        for (const label of darwinLaunchdLabels()) {
+            spawnSync("launchctl", ["bootout", `${gui()}/${label}`], { stdio: "pipe", timeout: 15_000 });
+            const plist = plistPathFor(label);
+            if (existsSync(plist)) {
+                try {
+                    rmSync(plist);
+                    console.log(`  Removed ${plist}`);
+                }
+                catch (err) {
+                    console.log(`  Failed to remove ${plist}: ${err instanceof Error ? err.message : String(err)}`);
+                }
             }
-            catch (err) {
-                console.log(`  Failed to remove ${plist}: ${err instanceof Error ? err.message : String(err)}`);
+            else {
+                console.log(`  ${plist} not found — skipping`);
             }
         }
-        else {
-            console.log(`  ${plist} not found — skipping`);
-        }
         return;
     }
     // Disable the service
@@ -737,6 +765,14 @@ function removeSystemdService() {
 // ---------------------------------------------------------------------------
 function removeOllama() {
     log("9", "Removing Ollama...");
+    // The stop/disable below is `sudo systemctl` — Linux-only. On darwin it would
+    // raise a spurious sudo prompt and log a FAILED. Skip like removeSamba /
+    // removeSystemConfig (Task 1403); brew-ollama teardown on darwin is out of
+    // scope here.
+    if (!isLinux()) {
+        console.log("  Not Linux — skipping.");
+        return;
+    }
     // Brand isolation: the Ollama binary and systemd service are
     // device-wide singletons — every brand on this device shares one Ollama
     // process. Leave both in place when a peer brand is still installed;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.392",
+  "version": "0.1.394",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/plugins/admin/skills/platform-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: platform-architecture
 description: Use when grounding any documented-surface claim about what Maxy ships — plugins, skills, specialists, install/deploy flows, internals. This is the install catalogue, not evidence of what is enabled on the current account. For install state on this account, call `capabilities-here`; for documented surface, cite the `Source:` URL inline.
-content-hash: sha256:11f2a3458fb6227490d33fcf54f859595c215184dbb78051484df353b6fbf227
+content-hash: sha256:bbee5596607064b556bd814bce3ebe7578ae948a7117ee0dd6bff5e5fbe4b209
 brand: maxy-code
 product-name: Maxy
 ---
@@ -620,6 +620,8 @@ cat ~/Library/LaunchAgents/com.rubytech.maxy-code.plist
 
 The plist points at the wrapper script the installer wrote and at log files under `$HOME/.maxy-code/logs/`. `launchctl bootstrap`'s exit code is recorded in the install log as `[create-maxy] launchd-plist=… loaded=true|false`.
 
+Each brand runs two LaunchAgents: the main service (`com.rubytech.maxy-code`) and a session manager (`com.rubytech.maxy-code-claude-session-manager`). On a re-install `launchctl bootstrap` of the session-manager agent can return a transient `exit 5: Input/output error` even when the agent was not already loaded; the installer boots the agent out and retries automatically. Each attempt is logged as `[launchd] agent=<label> bootout=<rc> bootstrap=<rc> attempt=<n>`, and only an EIO that persists across every attempt aborts the install.
+
 ## 4. Open the admin UI
 
 The install log's final block prints the URL. For the default brand on a default install:

package/payload/platform/services/claude-session-manager/dist/channel-mcp.d.ts

@@ -8,6 +8,11 @@ export interface ChannelMcpServerEntry {
 export declare function buildChannelMcpServers(p: {
     sessionId: string;
     targets: ChannelTargetSet;
+    /** Absolute path to the node binary that runs the channel server. On darwin
+     *  the launchd server PATH excludes an nvm node, so a bare `node` command
+     *  fails to spawn and the channel never boots (Task 1402); callers pass the
+     *  installer-resolved NODE_BIN. */
+    nodeBin: string;
 }): Record<string, ChannelMcpServerEntry>;
 export declare function channelDevChannelsArgv(): string[];
 export declare function channelMcpConfigPath(sessionId: string, dir: string): string;

package/payload/platform/services/claude-session-manager/dist/channel-mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel-mcp.d.ts","sourceRoot":"","sources":["../src/channel-mcp.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAE5D,eAAO,MAAM,mBAAmB,YAAY,CAAA;AAE5C,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC5B;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EAAE;IACxC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,gBAAgB,CAAA;CAC1B,GAAG,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAexC;AAED,wBAAgB,sBAAsB,IAAI,MAAM,EAAE,CAEjD;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,CAEhE"}
+{"version":3,"file":"channel-mcp.d.ts","sourceRoot":"","sources":["../src/channel-mcp.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAE5D,eAAO,MAAM,mBAAmB,YAAY,CAAA;AAE5C,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC5B;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EAAE;IACxC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,gBAAgB,CAAA;IACzB;;;uCAGmC;IACnC,OAAO,EAAE,MAAM,CAAA;CAChB,GAAG,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAexC;AAED,wBAAgB,sBAAsB,IAAI,MAAM,EAAE,CAEjD;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,CAEhE"}

package/payload/platform/services/claude-session-manager/dist/channel-mcp.js

@@ -13,7 +13,7 @@ export function buildChannelMcpServers(p) {
         throw new Error('buildChannelMcpServers: empty target set');
     return {
         [CHANNEL_SERVER_NAME]: {
-            command: 'node',
+            command: p.nodeBin,
             args: [anyTarget.serverPath],
             env: {
                 CHANNEL_SESSION_ID: p.sessionId,

package/payload/platform/services/claude-session-manager/dist/channel-mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"channel-mcp.js","sourceRoot":"","sources":["../src/channel-mcp.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,iFAAiF;AAEjF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAGhC,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAA;AAQ5C,MAAM,UAAU,sBAAsB,CAAC,CAGtC;IACC,mEAAmE;IACnE,wDAAwD;IACxD,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAA;IACzD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC3E,OAAO;QACL,CAAC,mBAAmB,CAAC,EAAE;YACrB,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC;YAC5B,GAAG,EAAE;gBACH,kBAAkB,EAAE,CAAC,CAAC,SAAS;gBAC/B,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;aAC3C;SACF;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,CAAC,yCAAyC,EAAE,UAAU,mBAAmB,EAAE,CAAC,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE,GAAW;IACjE,OAAO,IAAI,CAAC,GAAG,EAAE,gBAAgB,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;AACpF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,aAAqB;IACpD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,GAAG,sBAAsB,EAAE,CAAC,CAAA;AACrE,CAAC"}
+{"version":3,"file":"channel-mcp.js","sourceRoot":"","sources":["../src/channel-mcp.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,iFAAiF;AAEjF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAGhC,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAA;AAQ5C,MAAM,UAAU,sBAAsB,CAAC,CAQtC;IACC,mEAAmE;IACnE,wDAAwD;IACxD,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAA;IACzD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC3E,OAAO;QACL,CAAC,mBAAmB,CAAC,EAAE;YACrB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC;YAC5B,GAAG,EAAE;gBACH,kBAAkB,EAAE,CAAC,CAAC,SAAS;gBAC/B,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;aAC3C;SACF;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,CAAC,yCAAyC,EAAE,UAAU,mBAAmB,EAAE,CAAC,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE,GAAW;IACjE,OAAO,IAAI,CAAC,GAAG,EAAE,gBAAgB,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;AACpF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,aAAqB;IACpD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,GAAG,sBAAsB,EAAE,CAAC,CAAA;AACrE,CAAC"}

package/payload/platform/services/claude-session-manager/dist/config.d.ts

@@ -10,6 +10,12 @@ export interface ManagerConfig {
     port: number;
     persistDir: string;
     claudeBin: string;
+    /** Absolute node binary for spawned channel-MCP children. On darwin the
+     *  launchd server PATH excludes an nvm node, so channel descriptors must name
+     *  node explicitly rather than relying on a bare `node` on PATH (Task 1402).
+     *  Falls back to bare `node` when NODE_BIN is unset (Linux, where node is on
+     *  the base PATH). */
+    nodeBin: string;
     spawnCwd: string;
     urlCaptureTimeoutMs: number;
     killGraceMs: number;

package/payload/platform/services/claude-session-manager/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAA;AAGhC,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD;;4DAEwD;IACxD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB;;4EAEwE;IACxE,aAAa,EAAE,MAAM,CAAA;IACrB;;;gEAG4D;IAC5D,eAAe,EAAE,MAAM,CAAA;IACvB;;2EAEuE;IACvE,WAAW,EAAE,MAAM,CAAA;IACnB;;0EAEsE;IACtE,iBAAiB,EAAE,MAAM,CAAA;IACzB,IAAI,EAAE,cAAc,CAAA;IACpB;;;;;;;8BAO0B;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB;;;qDAGiD;IACjD,iBAAiB,EAAE,iBAAiB,CAAA;IACpC;;gFAE4E;IAC5E,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAwLD;;;;;;;6EAO6E;AAC7E,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;CACd;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,CAyBvE;AAED;;eAEe;AACf,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,CAE9D;AAED;;;;;;;kCAOkC;AAClC,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI/F;AAUD,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,aAAa,CAuE9E"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAA;AAGhC,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD;;4DAEwD;IACxD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB;;;;0BAIsB;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB;;4EAEwE;IACxE,aAAa,EAAE,MAAM,CAAA;IACrB;;;gEAG4D;IAC5D,eAAe,EAAE,MAAM,CAAA;IACvB;;2EAEuE;IACvE,WAAW,EAAE,MAAM,CAAA;IACnB;;0EAEsE;IACtE,iBAAiB,EAAE,MAAM,CAAA;IACzB,IAAI,EAAE,cAAc,CAAA;IACpB;;;;;;;8BAO0B;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB;;;qDAGiD;IACjD,iBAAiB,EAAE,iBAAiB,CAAA;IACpC;;gFAE4E;IAC5E,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAwLD;;;;;;;6EAO6E;AAC7E,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;CACd;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,CAyBvE;AAED;;eAEe;AACf,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,CAE9D;AAED;;;;;;;kCAOkC;AAClC,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI/F;AAUD,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,aAAa,CAyE9E"}

package/payload/platform/services/claude-session-manager/dist/config.js

@@ -241,6 +241,7 @@ export function loadConfig(env = process.env) {
     }
     const persistDir = env.CLAUDE_SESSION_MANAGER_PERSIST_DIR ?? join(homedir(), '.maxy');
     const claudeBin = env.CLAUDE_BIN ?? 'claude';
+    const nodeBin = env.NODE_BIN ?? 'node';
     const brand = loadBrand(env);
     const platformRoot = env.PLATFORM_ROOT ?? env.MAXY_PLATFORM_ROOT;
     if (!platformRoot) {
@@ -281,6 +282,7 @@ export function loadConfig(env = process.env) {
         port,
         persistDir,
         claudeBin,
+        nodeBin,
         spawnCwd,
         urlCaptureTimeoutMs: DEFAULT_URL_TIMEOUT_MS,
         killGraceMs: DEFAULT_KILL_GRACE_MS,