@rubytech/create-maxy-code 0.1.90 → 0.1.91

package/dist/index.js

@@ -3128,6 +3128,37 @@ WantedBy=multi-user.target
         spawnSync("sudo", ["loginctl", "enable-linger", currentUser], { stdio: "inherit" });
     }
     catch { /* not critical */ }
+    // Task 249: persist the systemd journal so per-unit lifecycle events
+    // (watchdog timeouts, SIGTERM/SIGKILL transitions, restart reasons) survive
+    // reboots and are queryable via `journalctl --user -u <brand>.service`.
+    //
+    // Bookworm-canonical mechanism: journald uses persistent storage when
+    // `/var/log/journal/<machine-id>/` exists. No user-level
+    // systemd-journald.service exists by default on Debian; the system instance
+    // stores user-unit events in the same tree, filtered at read time. We only
+    // restart journald when we just created the directory — if the path already
+    // existed, persistence was already active and restarting would needlessly
+    // churn the system journal during the install.
+    try {
+        const machineId = readFileSync("/etc/machine-id", "utf-8").trim();
+        if (machineId) {
+            const journalPath = `/var/log/journal/${machineId}`;
+            const alreadyPersistent = existsSync(journalPath);
+            if (!alreadyPersistent) {
+                console.log("  [privileged] mkdir /var/log/journal");
+                shell("mkdir", ["-p", journalPath], { sudo: true });
+                console.log("  [privileged] systemctl restart systemd-journald");
+                spawnSync("sudo", ["systemctl", "restart", "systemd-journald"], { stdio: "inherit", timeout: 15_000 });
+                logFile(`  journald persistence: enabled (created ${journalPath} + restarted journald)`);
+            }
+            else {
+                logFile(`  journald persistence: already active (${journalPath} present)`);
+            }
+        }
+    }
+    catch (err) {
+        console.error(`  WARNING: failed to enable journald persistence: ${err instanceof Error ? err.message : String(err)}`);
+    }
     // Reload and (re)start.
     //
     // ordering: on upgrades, the old main brand service still holds

package/dist/port-resolution.js

@@ -97,7 +97,7 @@ ExecStartPre=-/bin/bash ${o.installDir}/platform/scripts/resume-tunnel.sh
 ExecStart=/usr/bin/node --require ./server-init.cjs server.js
 Restart=on-failure
 RestartSec=5
-WatchdogSec=30
+WatchdogSec=120
 TimeoutStartSec=60
 TimeoutStopSec=10
 Environment=NODE_ENV=production

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.90",
+  "version": "0.1.91",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/premium-plugins/real-agent/plugins/brochures/skills/make-brochure/SKILL.md

@@ -48,7 +48,7 @@ Optional:
 
 - `force` — one of `brand`, `property`, `all`, or absent. When set, the named upstream step runs even if its output already exists.
 - `output_root` — defaults to the **caller's current working directory** (`./`). The orchestrator creates `<output_root>/<brand_slug>/` for the brand pack and nests properties at `<brand_slug>/properties/<property_slug>-<id>/`. To place the workspace elsewhere — e.g. alongside an existing brand pack from a prior run — pass `output_root` explicitly (absolute path, or relative to CWD). The orchestrator never infers location from an existing brand pack; if you already have one and want this run to reuse it, point `brand_source` at its directory path (see Routing rule 1) AND pass `output_root` to its parent so the new property nests under the same workspace.
-- `register` — one of `premium`, `branded`, or absent. **Premium** keeps the template's super-premium tokens verbatim (only the agent's logo and contact details change); the brand pack's DESIGN.md palette/type are deliberately *not* applied. **Branded** re-skins the template with the brand's tokens. Absent = use whichever the user's wording implies (the word "premium" or "super-premium" in the request → premium; presence of a DESIGN.md without that wording → branded; neither → premium defaults). The orchestrator passes the resolved register through to `property-brochure`. See `property-brochure → Default visual scheme — and when to override it` for the full contract.
+- `register` — one of `premium`, `branded`, or absent. **Premium** keeps the template's super-premium tokens verbatim (only the agent's logo and contact details change); the brand pack's DESIGN.md palette/type are deliberately *not* applied. **Branded** re-skins the template with the brand's tokens. **Absent → branded.** Resolve the register only AFTER brand-design has run, so DESIGN.md presence is a guaranteed state (brand-design is step 1 of this same pipeline; gating "branded" on a pre-existing DESIGN.md made the branch structurally unreachable on first runs and silently fell through to premium). Premium is **opt-in only** — the operator must say "premium" or "super-premium" in the request, otherwise branded. The orchestrator passes the resolved register through to `property-brochure`. See `property-brochure → Default visual scheme — and when to override it` for the full contract.
 
 If only one input is supplied, **decline and ask for the other** — the orchestrator's reason for being is having both. Route a single-input request to the appropriate sub-skill directly.
 

package/payload/server/server-init.cjs

@@ -17,6 +17,7 @@ const { spawnSync } = require('node:child_process')
 const { existsSync, readFileSync, writeFileSync } = require('node:fs')
 const os = require('node:os')
 const path = require('node:path')
+const { monitorEventLoopDelay } = require('node:perf_hooks')
 
 // ---------------------------------------------------------------------------
 // 0. Start counter — Task 173
@@ -124,10 +125,41 @@ if (NOTIFY_SOCKET) {
     console.error('[server-init] sd_notify READY=1 sent')
   })
 
-  // Watchdog ping every 15s (WatchdogSec=30, ping at half-interval)
-  const watchdogInterval = setInterval(() => sdNotify('WATCHDOG=1'), 15_000)
+  // Task 249: WATCHDOG_USEC is injected by systemd when Type=notify +
+  // WatchdogSec= is configured (microseconds, integer). Reading it at runtime
+  // means a future unit-file bump (e.g. 120 → 180) propagates without code
+  // changes. Ping every 15s regardless of deadline: trivially satisfies
+  // systemd's "≤ half-deadline" requirement for any deadline ≥ 30s, and
+  // gives the near-miss check 15s observation windows so a long block is
+  // surfaced within 15s of unblocking.
+  const WATCHDOG_USEC = Number.parseInt(process.env.WATCHDOG_USEC ?? '', 10)
+  const watchdogDeadlineMs = Number.isFinite(WATCHDOG_USEC) && WATCHDOG_USEC > 0
+    ? Math.floor(WATCHDOG_USEC / 1000)
+    : null
+
+  // monitorEventLoopDelay records every libuv tick's lag; a sync block of N
+  // seconds shows up as histogram.max ≈ N*1000 ms in the cycle where the
+  // block ends. When max crosses 50% of the deadline we emit one line so
+  // `grep '[server-init] watchdog ping miss' server.log` answers "did we
+  // approach the deadline, and how close" without needing systemd state or
+  // journald. Histogram is reset every cycle so max reflects this window.
+  // Only enabled when the deadline is known — no point recording samples no
+  // one reads.
+  const loopHist = watchdogDeadlineMs !== null ? monitorEventLoopDelay({ resolution: 50 }) : null
+  if (loopHist) loopHist.enable()
+
+  const watchdogInterval = setInterval(() => {
+    sdNotify('WATCHDOG=1')
+    if (loopHist && watchdogDeadlineMs !== null) {
+      const maxMs = loopHist.max / 1_000_000
+      loopHist.reset()
+      if (maxMs >= watchdogDeadlineMs / 2) {
+        console.error(`[server-init] watchdog ping miss lag-ms=${Math.round(maxMs)} deadline-ms=${watchdogDeadlineMs}`)
+      }
+    }
+  }, 15_000)
   watchdogInterval.unref() // don't keep the process alive for this
-  console.error('[server-init] watchdog enabled (15s interval)')
+  console.error(`[server-init] watchdog enabled (ping-interval-ms=15000 deadline-ms=${watchdogDeadlineMs ?? 'unset'})`)
 } else {
   console.error('[server-init] no NOTIFY_SOCKET, watchdog disabled')
 }

package/payload/server/server.js

@@ -601,6 +601,7 @@ var serveStatic = (options = { root: "" }) => {
 import { readFileSync as readFileSync20, existsSync as existsSync22, watchFile } from "fs";
 import { resolve as resolve23, join as join13, basename as basename5 } from "path";
 import { homedir as homedir4 } from "os";
+import { monitorEventLoopDelay } from "perf_hooks";
 
 // app/lib/agent-slug-pattern.ts
 var AGENT_SLUG_PATTERN = /^\/([a-z][a-z0-9-]{2,49})$/;
@@ -14085,6 +14086,21 @@ var port = requirePortEnv("MAXY_UI_INTERNAL_PORT", { tag: "ui-server" });
 var hostname = process.env.HOSTNAME ?? "127.0.0.1";
 var httpServer = serve({ fetch: app37.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
+{
+  const loopHist = monitorEventLoopDelay({ resolution: 50 });
+  loopHist.enable();
+  const LOG_THRESHOLD_MS = 1e3;
+  const WINDOW_MS2 = 3e4;
+  const lagTimer = setInterval(() => {
+    const maxMs = loopHist.max / 1e6;
+    const p99Ms = loopHist.percentile(99) / 1e6;
+    loopHist.reset();
+    if (maxMs >= LOG_THRESHOLD_MS) {
+      console.error(`[event-loop] lag p99=${Math.round(p99Ms)} max=${Math.round(maxMs)} window=${WINDOW_MS2 / 1e3}s`);
+    }
+  }, WINDOW_MS2);
+  lagTimer.unref();
+}
 console.log("[boot] auth-mode summary: oauth=8 api-key=1 (api-key consumer: invokePublicAgent only)");
 var SUBAPP_MANIFEST = [
   { prefix: "/api/health", file: "server/routes/health.ts", subapp: health_default },