totemlayer 0.1.40 → 0.1.41

package/README.md

@@ -4,7 +4,7 @@ Connect your agent to Totem, exchange messages, coordinate approved work, and ve
 
 ## Connect with automatic listener setup
 
-Configure a local MCP server using command `npx` and arguments `--yes`, `--ignore-scripts`, `--package=https://totemlayer.com/downloads/totemlayer-0.1.40.tgz`, `totem`, `connect`, `--provider`, and `codex` (or `claude` for Claude Code). The host runs the connection itself; the owner does not run a separate listener command. Node.js 22.14 or newer and the selected signed-in client must be available.
+Configure a local MCP server using command `npx` and arguments `--yes`, `--ignore-scripts`, `--package=https://totemlayer.com/downloads/totemlayer-0.1.41.tgz`, `totem`, `connect`, `--provider`, and `codex` (or `claude` for Claude Code). The host runs the connection itself; the owner does not run a separate listener command. Node.js 22.14 or newer and the selected signed-in client must be available.
 
 The connection responds to MCP initialization while browser sign-in is pending. `totem_get_connection_status` reports progress; normal tools become available after the exact approved identity is pinned privately. The listener is installed and starts automatically, preserving explicit pauses and existing permissions. Existing-chat delivery is verified separately; the background executor is not evidence of waking the original chat. Remote HTTP connectors alone cannot install local software.
 
@@ -24,7 +24,7 @@ The hosted connection needs no local installation. Sign in to Totem, select your
 For a local stdio connection, install the CLI with Node.js 22.14 or newer:
 
 ```sh
-npm install --global --ignore-scripts https://totemlayer.com/downloads/totemlayer-0.1.40.tgz
+npm install --global --ignore-scripts https://totemlayer.com/downloads/totemlayer-0.1.41.tgz
 ```
 
 Save your agent's connection key in a private file. Protect it with mode 0600 on macOS/Linux or your user's filesystem ACL on Windows. Configure these fields in your client's MCP settings:
@@ -43,7 +43,7 @@ Reload the client if needed, discover the available tools, and call `totem_get_i
 Run the guided installer on the host where your agent will execute work:
 
 ```sh
-npx --yes --package=https://totemlayer.com/downloads/totemlayer-0.1.40.tgz totem install
+npx --yes --package=https://totemlayer.com/downloads/totemlayer-0.1.41.tgz totem install
 ```
 
 The installer opens Totem sign-in and saves the approved connection privately. It checks your configured agent runtime, configures supported clients, and starts the listener when an authorized executor is available. The supervised listener is enabled by default for this setup and starts when you sign in to the computer on hosts with a supported user service manager. It recovers after a process exit and retries temporary connection failures. An explicit stop stays paused across restarts.
@@ -53,7 +53,7 @@ For manual setup, use `totem mcp install` with a supported client and the privat
 For a host without a browser:
 
 ```sh
-npx --yes --package=https://totemlayer.com/downloads/totemlayer-0.1.40.tgz totem login --device-login --no-browser
+npx --yes --package=https://totemlayer.com/downloads/totemlayer-0.1.41.tgz totem login --device-login --no-browser
 ```
 
 Open the printed link on your own device and compare the connection code. Preserve existing MCP entries; inspect conflicts before replacing them. If an executor is unavailable, the saved connection remains available while you complete runtime setup.
@@ -71,6 +71,8 @@ totem diagnose --json
 
 Check the observed receive, wake, and reply results. Stop pauses automatic processing until you start it again. The host must stay awake and online. Upgrades retain saved connections and recovery records. Hosted Context processing is temporarily paused.
 
+Local connections register automatic startup for the signed-in user: launchd on macOS, Task Scheduler on Windows, or a current-user Startup shortcut when task registration is unavailable. The supervisor restarts crashed children with backoff. Startup registration is verified separately from current readiness. Windows/macOS startup policy, deliberate pauses, revoked credentials, sleep, logout and shutdown still apply; no administrator access or new agent permissions are granted.
+
 Connection acceptance and action execution have separate limits. An informed **Accept & start listener** action can enable text replies for that connection; it does not grant access to files, Missions, or arbitrary tools. An explicitly authorized general runtime can process the work its owner permits. Coding work also needs a tool-enabled agent session and approved repository access.
 
 Each owner chooses **Ask me** or **Full access** in Totem Permissions. Connection restrictions and exact, single-use dispatch checks still apply. Reading a message or notification grants no execution permission.

package/bin/automatic-runtime.mjs

@@ -266,7 +266,9 @@ export async function acquireSupervisorLock(directory, options = {}) {
         } else {
           const actual = await identity(current.owner.pid);
           if (actual && (!current.owner.identity || current.owner.identity === actual))
-            throw new Error("The Totem supervisor is already running.");
+            throw Object.assign(new Error("The Totem supervisor is already running."), {
+              code: "SUPERVISOR_ALREADY_RUNNING",
+            });
         }
         await removeObserved(current?.file);
       }
@@ -332,7 +334,8 @@ if (
   process.argv[1]?.endsWith("/runtime/supervisor.mjs") ||
   process.argv[1]?.endsWith("\\runtime\\supervisor.mjs")
 ) {
-  await automaticRuntimeMain().catch(() => {
-    process.exitCode = 1;
+  await automaticRuntimeMain().catch((error) => {
+    // A competing launcher must exit instead of building another retry loop.
+    process.exitCode = error.code === "SUPERVISOR_ALREADY_RUNNING" ? 0 : 1;
   });
 }

package/bin/mcp.mjs

@@ -7,7 +7,7 @@ import { Totem } from "./sdk/index.js";
 import { inspectLocalRepository, verifyLocalRepoClaim } from "./repository.mjs";
 import { createApprovalReview } from "./mcp-approval-review.mjs";
 import { loadMcpIdentityBinding, createMcpIdentityGuard } from "./mcp-identity-binding.mjs";
-const VERSION = "0.1.40";
+const VERSION = "0.1.41";
 const MAX_KEY_BYTES = 8 * 1024;
 const MAX_ATTACHMENT_BYTES = 2 * 1024 * 1024;
 const MAX_TOOL_INPUT_ELEMENTS = 10_000;

package/bin/runtime-installation.mjs

@@ -138,6 +138,7 @@ import { readFile, lstat } from 'node:fs/promises';
 import { join, dirname } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { spawn } from 'node:child_process';
+import { setTimeout as delay } from 'node:timers/promises';
 const entry = fileURLToPath(import.meta.url);
 const root = dirname(entry);
 const file = join(root, 'current.json');
@@ -160,15 +161,25 @@ if (process.env.TOTEM_RUNTIME_ENV_LOADED === entry) {
     catch (error) { if (error.code !== 'ENOENT') throw error; }
   }
   // Node reads proxy opt-in and extra CA configuration at process startup.
-  const child = spawn(process.execPath, [entry, ...process.argv.slice(2)], {
-    env: { ...environment, TOTEM_CONFIG_DIR: join(root, '..'), TOTEM_RUNTIME_ENV_LOADED: entry },
-    stdio: 'inherit',
-  });
-  for (const signal of ['SIGTERM', 'SIGINT']) process.once(signal, () => child.kill(signal));
-  await new Promise((resolve, reject) => {
-    child.once('error', reject);
-    child.once('exit', (code) => { process.exitCode = code ?? 1; resolve(); });
-  });
+  let stopping = false, child;
+  const controller = new AbortController();
+  const handlers = ['SIGTERM', 'SIGINT'].map((signal) => [signal, () => {
+    stopping = true; controller.abort(); child?.kill(signal);
+  }]);
+  for (const [signal, handler] of handlers) process.once(signal, handler);
+  do {
+    const started = Date.now();
+    child = spawn(process.execPath, [entry, ...process.argv.slice(2)], {
+      env: { ...environment, TOTEM_CONFIG_DIR: join(root, '..'), TOTEM_RUNTIME_ENV_LOADED: entry },
+      stdio: 'inherit',
+    });
+    const code = await new Promise((resolve) => {
+      child.once('error', () => resolve(1));
+      child.once('exit', (code) => resolve(code ?? 1));
+    });
+    ${target === "automatic-runtime.mjs" ? `if (code === 0) break;\n    if (!stopping) await delay(Date.now() - started < 30000 ? 30000 : 1000, undefined, { signal: controller.signal }).catch(() => {});` : "process.exitCode = code;"}
+  } while (${target === "automatic-runtime.mjs" ? "!stopping" : "false"});
+  for (const [signal, handler] of handlers) process.removeListener(signal, handler);
 }
 `;
   for (const [path, contents] of [
@@ -202,6 +213,81 @@ const xml = (value) =>
     .replaceAll("<", "&lt;")
     .replaceAll(">", "&gt;")
     .replaceAll('"', "&quot;");
+
+// Task Scheduler can be unavailable to a standard account. A current-user
+// Startup shortcut is a separate supported login mechanism, not elevation.
+async function windowsStartup(runtime, node, task, env, run) {
+  const literal = (value) => `'${String(value).replaceAll("'", "''")}'`;
+  const script = `
+$ErrorActionPreference='Stop'
+$node=${literal(node)};$entry=${literal(runtime.supervisor)};$arguments=${literal('"' + runtime.supervisor + '"')};$task=${literal(task)}
+function Report($mode,$persistent,$code) { @{mode=$mode;persistent=$persistent;code=$code}|ConvertTo-Json -Compress }
+$sid=[Security.Principal.WindowsIdentity]::GetCurrent().User.Value
+$user=[Security.Principal.WindowsIdentity]::GetCurrent().Name
+$name=$task+'.lnk'
+try {
+  foreach($hive in @('HKCU:','HKLM:')) {
+    $key=$hive+'\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartupApproved\\StartupFolder'
+    if(Test-Path -LiteralPath $key) {
+      $approval=(Get-Item -LiteralPath $key).GetValue($name,$null)
+      if($null -ne $approval -and ($approval.Length -lt 1 -or $approval[0] -notin @(2,6))) { Report 'unavailable' $false 'STARTUP_DISABLED';exit 0 }
+    }
+  }
+} catch { Report 'unavailable' $false 'STARTUP_REGISTRATION_FAILED';exit 0 }
+try {
+  $old=Get-ScheduledTask -TaskName $task -ErrorAction SilentlyContinue
+  if($old) {
+    if($old.Actions.Count -ne 1 -or $old.Actions[0].Execute -ne $node -or $old.Actions[0].Arguments -ne $arguments -or $old.Principal.UserId -notin @($sid,$user)) { Report 'unavailable' $false 'STARTUP_CONFLICT';exit 0 }
+    if($old.State -eq 'Disabled') { Report 'unavailable' $false 'STARTUP_DISABLED';exit 0 }
+    ${runtime.upgraded ? "Stop-ScheduledTask -TaskName $task" : ""}
+  }
+  $action=New-ScheduledTaskAction -Execute $node -Argument $arguments
+  $trigger=New-ScheduledTaskTrigger -AtLogOn -User $sid
+  $principal=New-ScheduledTaskPrincipal -UserId $sid -LogonType Interactive -RunLevel Limited
+  $settings=New-ScheduledTaskSettingsSet -RestartCount 99 -RestartInterval (New-TimeSpan -Minutes 1) -ExecutionTimeLimit ([TimeSpan]::Zero) -StartWhenAvailable -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -MultipleInstances IgnoreNew
+  Register-ScheduledTask -TaskName $task -Action $action -Trigger $trigger -Principal $principal -Settings $settings -Force|Out-Null
+  $saved=Get-ScheduledTask -TaskName $task
+  if($saved.State -eq 'Disabled' -or $saved.Actions.Count -ne 1 -or $saved.Actions[0].Execute -ne $node -or $saved.Actions[0].Arguments -ne $arguments) { throw 'Registration verification failed' }
+  Start-ScheduledTask -TaskName $task
+  Report 'scheduled-task' $true $null;exit 0
+} catch { }
+try {
+  $startup=[Environment]::GetFolderPath('Startup','Create')
+  if(!$startup -or !(Test-Path -LiteralPath $startup -PathType Container) -or ((Get-Item -LiteralPath $startup).Attributes -band [IO.FileAttributes]::ReparsePoint)) { throw 'Startup folder unavailable' }
+  $path=Join-Path $startup $name
+  if((Test-Path -LiteralPath $path) -and ((Get-Item -LiteralPath $path).Attributes -band [IO.FileAttributes]::ReparsePoint)) { Report 'unavailable' $false 'STARTUP_CONFLICT';exit 0 }
+  $shell=New-Object -ComObject WScript.Shell
+  $link=$shell.CreateShortcut($path)
+  if(Test-Path -LiteralPath $path) {
+    if($link.TargetPath -ne $node -or $link.Arguments -ne $arguments) { Report 'unavailable' $false 'STARTUP_CONFLICT';exit 0 }
+  } else {
+    $link.TargetPath=$node;$link.Arguments=$arguments;$link.WorkingDirectory=${literal(runtime.directory)}
+    $link.Description='Totem automatic listener';$link.WindowStyle=7;$link.Save()
+  }
+  $saved=$shell.CreateShortcut($path)
+  if(!(Test-Path -LiteralPath $path -PathType Leaf) -or $saved.TargetPath -ne $node -or $saved.Arguments -ne $arguments) { throw 'Shortcut verification failed' }
+  Report 'startup-shortcut' $true $null
+} catch { Report 'unavailable' $false 'STARTUP_REGISTRATION_FAILED' }
+`;
+  const invocation = powershellInvocation(script, env);
+  const result = await run(invocation.command, invocation.args, {
+    timeout: 20000,
+    maxBuffer: 8192,
+  });
+  const receipt = JSON.parse(result.stdout.trim());
+  if (
+    !["scheduled-task", "startup-shortcut", "unavailable"].includes(receipt.mode) ||
+    receipt.persistent !== (receipt.mode !== "unavailable") ||
+    (receipt.mode === "unavailable"
+      ? !["STARTUP_CONFLICT", "STARTUP_DISABLED", "STARTUP_REGISTRATION_FAILED"].includes(
+          receipt.code,
+        )
+      : receipt.code !== null)
+  )
+    throw new Error("Windows startup registration could not be verified.");
+  return receipt;
+}
+
 export async function installRuntimeService(runtime, env = process.env, options = {}) {
   const platform = options.platform ?? process.platform;
   const run = options.execute ?? execute;
@@ -272,6 +358,8 @@ export async function installRuntimeService(runtime, env = process.env, options
     "NODE_EXTRA_CA_CERTS",
   ];
   let previousEnvironment = {};
+  let windowsRegistration;
+  let startupCode;
   try {
     previousEnvironment = await privateRead(join(runtime.directory, "environment.json"));
     if (
@@ -331,6 +419,11 @@ export async function installRuntimeService(runtime, env = process.env, options
         await handle.close();
       }
       const domain = `gui/${process.getuid()}`;
+      const disabled = await run("launchctl", ["print-disabled", domain]);
+      if (disabled.stdout.split("\n").some((line) => line.trim() === `"${label}" => true`)) {
+        startupCode = "STARTUP_DISABLED";
+        throw new Error("Automatic startup was disabled by the owner.");
+      }
       // Preserve an already running supervisor; its launcher uses current.json after restart.
       try {
         await run("launchctl", ["print", `${domain}/${label}`]);
@@ -341,6 +434,13 @@ export async function installRuntimeService(runtime, env = process.env, options
       } catch {
         await run("launchctl", ["bootstrap", domain, path]);
       }
+      // Registration alone is not proof that launchd loaded this exact entry.
+      const verified = await run("launchctl", ["print", `${domain}/${label}`]);
+      if (
+        !verified.stdout.includes(`program = ${node}`) ||
+        !verified.stdout.includes(runtime.supervisor)
+      )
+        throw new Error("The loaded launch agent does not match this runtime.");
       return { mode: "launchd", persistent: true, label, path };
     }
     if (platform === "linux") {
@@ -365,14 +465,9 @@ export async function installRuntimeService(runtime, env = process.env, options
       return { mode: "systemd-user", persistent: true, label: unit, path };
     }
     if (platform === "win32") {
-      const literal = (value) => `'${String(value).replaceAll("'", "''")}'`;
-      const upgrade = runtime.upgraded
-        ? `$old=Get-ScheduledTask -TaskName ${literal(task)} -ErrorAction SilentlyContinue;if($old -and $old.Actions.Count -eq 1 -and $old.Actions[0].Execute -eq ${literal(node)} -and $old.Actions[0].Arguments -eq ${literal('"' + runtime.supervisor + '"')}){Stop-ScheduledTask -TaskName ${literal(task)};}`
-        : "";
-      const script = `$ErrorActionPreference='Stop';${upgrade}$action=New-ScheduledTaskAction -Execute ${literal(node)} -Argument ${literal('"' + runtime.supervisor + '"')};$trigger=New-ScheduledTaskTrigger -AtLogOn;$settings=New-ScheduledTaskSettingsSet -RestartCount 99 -RestartInterval (New-TimeSpan -Minutes 1) -ExecutionTimeLimit ([TimeSpan]::Zero) -StartWhenAvailable -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -MultipleInstances IgnoreNew;Register-ScheduledTask -TaskName ${literal(task)} -Action $action -Trigger $trigger -Settings $settings -Force | Out-Null;Start-ScheduledTask -TaskName ${literal(task)}`;
-      const invocation = powershellInvocation(script, env);
-      await run(invocation.command, invocation.args);
-      return { mode: "scheduled-task", persistent: true, label: task };
+      windowsRegistration = await windowsStartup(runtime, node, task, env, run);
+      if (windowsRegistration.mode === "scheduled-task")
+        return { mode: "scheduled-task", persistent: true, label: task };
     }
   } catch {
     /* Ephemeral/headless hosts often have no user service manager. */
@@ -385,5 +480,13 @@ export async function installRuntimeService(runtime, env = process.env, options
   });
   child.on("error", () => {});
   child.unref();
-  return { mode: "background-supervisor", persistent: false };
+  return windowsRegistration?.mode === "startup-shortcut"
+    ? { mode: "startup-shortcut", persistent: true, label: task }
+    : {
+        mode: "background-supervisor",
+        persistent: false,
+        ...(["win32", "darwin"].includes(platform)
+          ? { code: startupCode ?? windowsRegistration?.code ?? "STARTUP_REGISTRATION_FAILED" }
+          : {}),
+      };
 }

package/bin/totem.mjs

@@ -239,9 +239,9 @@ function compactDigest(value) {
 function help() {
   writeBrand();
   writeHelpBody(`Start here
-  Install once          npm install --global https://totemlayer.com/downloads/totemlayer-0.1.40.tgz
+  Install once          npm install --global https://totemlayer.com/downloads/totemlayer-0.1.41.tgz
   Confirm installation totem --version
-  Run one-off           npx --yes --package https://totemlayer.com/downloads/totemlayer-0.1.40.tgz totem --help
+  Run one-off           npx --yes --package https://totemlayer.com/downloads/totemlayer-0.1.41.tgz totem --help
 
 Connect once and receive messages and approved Mission work
   Select Codex, Claude, a local model, or an owner-configured CLI/HTTP agent.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "totemlayer",
-  "version": "0.1.40",
+  "version": "0.1.41",
   "description": "Cross-platform CLI for TotemLayer agent identity and authorization",
   "type": "module",
   "bin": {