Skip to content

LaunchAgent Migration — Mac → Z2

Status: 37 migrated, 21 remaining on Mac

CategoryCountDescriptionStatus
A1 (pure API)21Network-only, no vault readMIGRATED → Z2 systemd timers
A2 (vault readers)12Need SSH to Mac for vault accessMIGRATED → Z2 SSH-trigger model
B (Mac-locked)11Apple frameworks / GUI / tunnelStays on Mac
C (partial)6NFS agents, scripts already on Z2MIGRATED → Z2 timers
D (redundant)3Superseded by CT106DELETED

Z2 Timer Count

  • Z2 host: 34 active (hinata-*), minus 5 deleted 2026-06-11 (hinata-poll-truelayer-morning, hinata-poll-truelayer-evening, hinata-normalise-inbox, hinata-transcribe-audio, hinata-mail-body-archive)
  • CT107 internal: 4 active (memory-*)
  • CT109 internal: 6 active (bulma-poll-monzo, bulma-poll-truelayer every 15 min; bulma-analytics 06:30; bulma-daily-alert 09:00; bulma-weekly-alert Sun 19:00; bulma-weekly-summary Sun 20:00)

Mac-locked agents (12 — permanent Mac residents)

calendar-nudge, call-slot-planner, cloudflared-tunnel, connection-restore, eod-calendar-sync, fit-sync, health-export, health-normaliser, refresh-tasks, screen-time-extract, screen-time-poller, studio-dev

Mac runs NO banking pollers and NO banking LaunchAgents. Mac is reauth surface only (reauth-monzo.py, reauth-truelayer.py, push-monzo-tokens.sh in Sandpit/hinata-sandpit/scripts/).

CT109 — bulma-finance (192.168.1.214)

Bulma banking container. Six systemd timers:

TimerSchedule
bulma-poll-monzoEvery 15 min
bulma-poll-truelayerEvery 15 min
bulma-analytics06:30 daily
bulma-daily-alert09:00 daily
bulma-weekly-alertSun 19:00
bulma-weekly-summarySun 20:00

Data plane: /mnt/data/hinata/data/bulma (Z2 host) bind-mounted at /root/data/bulma (CT109). Collector from inside LXC = LAN 192.168.1.153:8090 (host Tailscale IP 100.120.141.100 unreachable from LXC).

Session 39 updates (2026-06-08)

  • bulma-api, weather-api, email-intelligence-api — Mac plists disabled (.disabled). Z2 sole runtime.
  • token-burn-continuous — Z2 service fixed (was SSHing to Mac, now runs natively). Mac plist still active for stability window.
  • refresh-tasks — reclassified Mac-locked (Mac-local vault + BSD stat/md5 + Studio deploy).
  • CT106 Itachi bind mount/mnt/data/itachi-credentials/ mounted read-only at /opt/itachi/ in CT106.

CT107 (memory container)

Debian 12, 512MB, 1 core. SSHFS mounts vault and Sandpit from Mac via LAN. 4 timers:

  • fold-daily 03:00
  • tasks-sync 03:05
  • generate-html 03:10
  • fold-monthly 1st 03:30

Open proposals from handover

  • Delete jimmy-neutron data/ folder — data migrated to CT100 postgres. Files: cli-tokens-override.json, colonel-inputs, session-labels, burnout-brake. Recommend git rm once confirmed.
  • Rogue agent-audit investigation — session 28 carryover, Michael-gated