totemlayer 0.1.37 → 0.1.38

package/README.md

@@ -18,7 +18,7 @@ The hosted connection needs no local installation. Sign in to Totem, select your
 For a local stdio connection, install the CLI with Node.js 22.14 or newer:
 
 ```sh
-npm install --global --ignore-scripts https://totemlayer.com/downloads/totemlayer-0.1.37.tgz
+npm install --global --ignore-scripts https://totemlayer.com/downloads/totemlayer-0.1.38.tgz
 ```
 
 Save your agent's connection key in a private file. Protect it with mode 0600 on macOS/Linux or your user's filesystem ACL on Windows. Configure these fields in your client's MCP settings:
@@ -37,7 +37,7 @@ Reload the client if needed, discover the available tools, and call `totem_get_i
 Run the guided installer on the host where your agent will execute work:
 
 ```sh
-npx --yes --package=https://totemlayer.com/downloads/totemlayer-0.1.37.tgz totem install
+npx --yes --package=https://totemlayer.com/downloads/totemlayer-0.1.38.tgz totem install
 ```
 
 The installer opens Totem sign-in and saves the approved connection privately. It checks your configured agent runtime, configures supported clients, and starts the listener when an authorized executor is available. The supervised listener is enabled by default for this setup and starts when you sign in to the computer on hosts with a supported user service manager. It recovers after a process exit and retries temporary connection failures. An explicit stop stays paused across restarts.
@@ -47,7 +47,7 @@ For manual setup, use `totem mcp install` with a supported client and the privat
 For a host without a browser:
 
 ```sh
-npx --yes --package=https://totemlayer.com/downloads/totemlayer-0.1.37.tgz totem login --device-login --no-browser
+npx --yes --package=https://totemlayer.com/downloads/totemlayer-0.1.38.tgz totem login --device-login --no-browser
 ```
 
 Open the printed link on your own device and compare the connection code. Preserve existing MCP entries; inspect conflicts before replacing them. If an executor is unavailable, the saved connection remains available while you complete runtime setup.

package/bin/connected-agent-service.mjs

@@ -2,6 +2,7 @@ import { setTimeout as sleep } from "node:timers/promises";
 import { runMissionAgentService } from "./mission-agent-service.mjs";
 import { runRuntime } from "./network-runtime.mjs";
 import { acquireMissionAgentSession } from "./mission-agent-session.mjs";
+import { runtimeErrorCode } from "./runtime-diagnostics.mjs";
 
 // Both queues use the same verified identity and private profile. A stopped or
 // revoked connection cancels both consumers; Missions retains its own leases.
@@ -20,9 +21,11 @@ export async function runConnectedAgentService(settings, dependencies = {}) {
       ? AbortSignal.any([settings.signal, controller.signal])
       : controller.signal;
     const emit = settings.emit ?? (() => {});
-    const phases = {
-      messages: "starting",
-      missions: settings.connectionOnly || settings.codexThreadId ? "waiting" : "starting",
+    const consumers = {
+      messages: { type: "starting" },
+      missions: {
+        type: settings.connectionOnly || settings.codexThreadId ? "waiting" : "starting",
+      },
     };
     let releaseMissions;
     const messageReady = new Promise((resolve) => {
@@ -42,13 +45,21 @@ export async function runConnectedAgentService(settings, dependencies = {}) {
         emit(event);
         return;
       }
-      phases[queue] = event.type === "completed" ? "waiting" : event.type;
-      const values = Object.values(phases);
+      consumers[queue] = {
+        ...event,
+        type: event.type === "completed" ? "waiting" : event.type,
+        ...(event.type === "blocked" ? { code: runtimeErrorCode(event) } : {}),
+      };
+      const values = Object.values(consumers);
       const type =
         ["reconnecting", "starting", "blocked", "working"].find((phase) =>
-          values.includes(phase),
+          values.some((consumer) => consumer.type === phase),
         ) ?? "waiting";
-      emit({ ...event, type });
+      // A healthy sibling poll must not replace the blocked consumer's code or IDs.
+      const current = consumers[queue];
+      const selected =
+        current.type === type ? current : values.find((consumer) => consumer.type === type);
+      emit({ ...(selected ?? current), type });
     };
     const messages = async () => {
       let attempts = 0;

package/bin/mcp.mjs

@@ -7,7 +7,7 @@ import { Totem } from "./sdk/index.js";
 import { inspectLocalRepository, verifyLocalRepoClaim } from "./repository.mjs";
 import { createApprovalReview } from "./mcp-approval-review.mjs";
 import { loadMcpIdentityBinding, createMcpIdentityGuard } from "./mcp-identity-binding.mjs";
-const VERSION = "0.1.37";
+const VERSION = "0.1.38";
 const MAX_KEY_BYTES = 8 * 1024;
 const MAX_ATTACHMENT_BYTES = 2 * 1024 * 1024;
 const MAX_TOOL_INPUT_ELEMENTS = 10_000;

package/bin/mission-agent-service.mjs

@@ -153,6 +153,7 @@ export async function runMissionAgentService(
     ollamaUrl,
     reasoning = false,
     adapterSettings = {},
+    diagnosticDirectory,
     stateDirectory = join(homedir(), ".totem", "missions"),
     pollMs = 5000,
     signal,
@@ -316,6 +317,7 @@ export async function runMissionAgentService(
         ollamaUrl,
         reasoning,
         adapterSettings,
+        diagnosticDirectory,
         signal,
         candidateWorkItem: workItem,
         recoveryOnly,

package/bin/mission-worker.mjs

@@ -1624,6 +1624,7 @@ async function runStructuredMissionAgent({
   reasoning = false,
   rejectionEvidenceDirectory,
   adapterSettings = {},
+  diagnosticDirectory,
   inspector = customerInspector(),
   task,
 }) {
@@ -1669,6 +1670,7 @@ async function runStructuredMissionAgent({
           schema: body.response_format?.json_schema?.schema,
           signal: options.signal,
           timeoutMs,
+          diagnosticDirectory,
         });
         return { choices: [{ message: { content } }] };
       }
@@ -2594,6 +2596,7 @@ export async function runMissionWorker({
   emit = () => {},
   runAgent = runLocalMissionAgent,
   adapterSettings = {},
+  diagnosticDirectory,
   inspector,
   inspectorOptions,
 }) {
@@ -2612,7 +2615,14 @@ export async function runMissionWorker({
         write: input.write ?? false,
         stage: input.stage,
       },
-      (snapshot) => uncheckedRunAgent({ ...input, ...snapshot, inspector, task: originalTask }),
+      (snapshot) =>
+        uncheckedRunAgent({
+          ...input,
+          ...snapshot,
+          inspector,
+          task: originalTask,
+          diagnosticDirectory,
+        }),
       { task: originalTask, signal: input.signal },
     );
     await inspector.assertAllowed("output", result, { task: originalTask, signal: input.signal });

package/bin/network-runtime.mjs

@@ -95,6 +95,7 @@ export async function modelReply({
   timeoutMs,
   fetcher = fetch,
   adapterSettings = {},
+  diagnosticDirectory,
 }) {
   if (isExternalModelProvider(provider))
     return {
@@ -106,6 +107,7 @@ export async function modelReply({
         messages,
         signal,
         timeoutMs,
+        diagnosticDirectory,
       }),
     };
   const timeout = AbortSignal.timeout(timeoutMs);
@@ -438,6 +440,7 @@ async function generate({
             signal,
             timeoutMs: settings.modelTimeoutMs,
             adapterSettings: settings.adapterSettings,
+            diagnosticDirectory: settings.diagnosticDirectory,
           });
         } catch (error) {
           // Keep unknown execution outcomes guarded, including across restarts.

package/bin/runtime-diagnostics.mjs

@@ -1,4 +1,13 @@
+const MISSION_ERROR_CODES = new Map([
+  ["permission_denied", "MISSION_PERMISSION_DENIED"],
+  ["repository_configuration_invalid", "MISSION_REPOSITORY_CONFIGURATION_INVALID"],
+  ["needs_attention", "MISSION_NEEDS_ATTENTION"],
+  ["work_failed", "MISSION_WORK_FAILED"],
+  ["recovery_waiting", "MISSION_RECOVERY_WAITING"],
+]);
+
 export const RUNTIME_ERROR_CODES = new Set([
+  ...MISSION_ERROR_CODES.values(),
   "AGENT_START_FAILED",
   "AGENT_EXIT_FAILED",
   "AGENT_REPORTED_FAILURE",
@@ -36,8 +45,15 @@ export const RUNTIME_ERROR_CODES = new Set([
   "READINESS_PROBE_FAILED",
   "RUNTIME_AUTHORIZATION_REJECTED",
   "RUNTIME_SUPERSEDED",
+  "COMMUNICATION_POLICY_DENIED",
+  "SENDER_DENIED",
+  "ENVIRONMENT_MISMATCH",
+  "SENDER_INACTIVE",
+  "RECIPIENT_INACTIVE",
+  "INVALID_COMMUNICATION_POLICY",
   "INTERNAL_ERROR",
 ]);
 export function runtimeErrorCode(error) {
-  return RUNTIME_ERROR_CODES.has(error?.code) ? error.code : "INTERNAL_ERROR";
+  const code = MISSION_ERROR_CODES.get(error?.code) ?? error?.code;
+  return RUNTIME_ERROR_CODES.has(code) ? code : "INTERNAL_ERROR";
 }

package/bin/totem.mjs

@@ -237,9 +237,9 @@ function compactDigest(value) {
 function help() {
   writeBrand();
   writeHelpBody(`Start here
-  Install once          npm install --global https://totemlayer.com/downloads/totemlayer-0.1.37.tgz
+  Install once          npm install --global https://totemlayer.com/downloads/totemlayer-0.1.38.tgz
   Confirm installation totem --version
-  Run one-off           npx --yes --package https://totemlayer.com/downloads/totemlayer-0.1.37.tgz totem --help
+  Run one-off           npx --yes --package https://totemlayer.com/downloads/totemlayer-0.1.38.tgz totem --help
 
 Connect once and receive messages and approved Mission work
   Select Codex, Claude, a local model, or an owner-configured CLI/HTTP agent.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "totemlayer",
-  "version": "0.1.37",
+  "version": "0.1.38",
   "description": "Cross-platform CLI for TotemLayer agent identity and authorization",
   "type": "module",
   "bin": {