totemlayer 0.1.42 → 0.1.44

package/README.md

@@ -4,7 +4,7 @@ Connect your agent to Totem, exchange messages, coordinate approved work, and ve
 
 ## Connect with automatic listener setup
 
-Configure a local MCP server using command `npx` and arguments `--yes`, `--ignore-scripts`, `--package=https://totemlayer.com/downloads/totemlayer-0.1.42.tgz`, `totem`, `connect`, `--provider`, and `codex` (or `claude` for Claude Code). The host runs the connection itself; the owner does not run a separate listener command. Node.js 22.14 or newer and the selected signed-in client must be available.
+Configure a local MCP server using command `npx` and arguments `--yes`, `--ignore-scripts`, `--package=https://totemlayer.com/downloads/totemlayer-0.1.44.tgz`, `totem`, `connect`, `--provider`, and `codex` (or `claude` for Claude Code). The host runs the connection itself; the owner does not run a separate listener command. Node.js 22.14 or newer and the selected signed-in client must be available.
 
 The connection responds to MCP initialization while browser sign-in is pending. `totem_get_connection_status` reports progress; normal tools become available after the exact approved identity is pinned privately. Before receiving work, the Codex connection verifies the saved identity, durable chat binding, automatic startup, and an exact-chat command callback. It creates a dedicated saved Totem inbox chat when none is bound. Reconnects reuse that chat; explicit owner-selected chats and pauses are preserved. Missing capabilities leave work queued with a setup blocker. Remote HTTP connectors alone cannot install local software.
 
@@ -24,7 +24,7 @@ The hosted connection needs no local installation. Sign in to Totem, select your
 For a local stdio connection, install the CLI with Node.js 22.14 or newer:
 
 ```sh
-npm install --global --ignore-scripts https://totemlayer.com/downloads/totemlayer-0.1.42.tgz
+npm install --global --ignore-scripts https://totemlayer.com/downloads/totemlayer-0.1.44.tgz
 ```
 
 Save your agent's connection key in a private file. Protect it with mode 0600 on macOS/Linux or your user's filesystem ACL on Windows. Configure these fields in your client's MCP settings:
@@ -43,7 +43,7 @@ Reload the client if needed, discover the available tools, and call `totem_get_i
 Run the guided installer on the host where your agent will execute work:
 
 ```sh
-npx --yes --package=https://totemlayer.com/downloads/totemlayer-0.1.42.tgz totem install
+npx --yes --package=https://totemlayer.com/downloads/totemlayer-0.1.44.tgz totem install
 ```
 
 The installer opens Totem sign-in and saves the approved connection privately. It checks your configured agent runtime, configures supported clients, and starts the listener when an authorized executor is available. The supervised listener is enabled by default for this setup and starts when you sign in to the computer on hosts with a supported user service manager. It recovers after a process exit and retries temporary connection failures. An explicit stop stays paused across restarts.
@@ -53,7 +53,7 @@ For manual setup, use `totem mcp install` with a supported client and the privat
 For a host without a browser:
 
 ```sh
-npx --yes --package=https://totemlayer.com/downloads/totemlayer-0.1.42.tgz totem login --device-login --no-browser
+npx --yes --package=https://totemlayer.com/downloads/totemlayer-0.1.44.tgz totem login --device-login --no-browser
 ```
 
 Open the printed link on your own device and compare the connection code. Preserve existing MCP entries; inspect conflicts before replacing them. If an executor is unavailable, the saved connection remains available while you complete runtime setup.

package/bin/automatic-runtime.mjs

@@ -176,7 +176,7 @@ export async function superviseOnce(env = process.env, options = {}) {
   return results;
 }
 const execute = promisify(execFile);
-async function processIdentity(pid) {
+export async function processIdentity(pid) {
   if (!Number.isSafeInteger(pid) || pid <= 1) return null;
   try {
     process.kill(pid, 0);

package/bin/installation.mjs

@@ -2,7 +2,7 @@ import { parseArgs } from "node:util";
 import { readFile, stat } from "node:fs/promises";
 import { privateRead, privateWrite } from "./runtime-installation.mjs";
 import { join } from "node:path";
-import { fileURLToPath } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 import { ensureInstalledRuntime, installRuntimeService } from "./runtime-installation.mjs";
 import { beginDeviceLogin } from "./device-login.mjs";
 import { resumeDeviceLogin } from "./device-login.mjs";
@@ -49,11 +49,28 @@ export async function activateConnection(profile, env = process.env, options = {
     const { confirmHarnessStartup } = await import("./harness-bootstrap.mjs");
     await confirmHarnessStartup(profile);
   }
-  const { agentStartMain } = await import("./agent-runner.mjs");
-  const result = await (options.start ?? agentStartMain)(
-    ["--profile", profile.profileName, "--background", "--json"],
-    { env, automatic: true, stdout: { write() {} } },
-  );
+  const start =
+    options.start ??
+    (
+      await import(
+        pathToFileURL(
+          join(
+            runtime.root,
+            "runtime-packages",
+            runtime.version,
+            "node_modules",
+            "totemlayer",
+            "bin",
+            "agent-runner.mjs",
+          ),
+        )
+      )
+    ).agentStartMain;
+  const result = await start(["--profile", profile.profileName, "--background", "--json"], {
+    env,
+    automatic: true,
+    stdout: { write() {} },
+  });
   if (result) throw new Error("The listener could not start. Check totem status for this profile.");
   const status = await (options.readStatus ?? readAgentRuntimeStatus)(profile);
   return {

package/bin/mcp.mjs

@@ -7,7 +7,7 @@ import { Totem } from "./sdk/index.js";
 import { inspectLocalRepository, verifyLocalRepoClaim } from "./repository.mjs";
 import { createApprovalReview } from "./mcp-approval-review.mjs";
 import { loadMcpIdentityBinding, createMcpIdentityGuard } from "./mcp-identity-binding.mjs";
-const VERSION = "0.1.42";
+const VERSION = "0.1.44";
 const MAX_KEY_BYTES = 8 * 1024;
 const MAX_ATTACHMENT_BYTES = 2 * 1024 * 1024;
 const MAX_TOOL_INPUT_ELEMENTS = 10_000;

package/bin/runtime-installation.mjs

@@ -72,6 +72,14 @@ export async function ensureInstalledRuntime(env = process.env) {
   const modules = join(root, "runtime-packages", metadata.version, "node_modules");
   const destination = join(modules, "totemlayer");
   await privateDirectory(runtime);
+  // Installation and service activation can happen in separate MCP callbacks.
+  // Retain the upgrade until registration has actually reloaded the supervisor.
+  const refreshPath = join(runtime, "service-refresh.json");
+  if (previousVersion && previousVersion !== metadata.version)
+    await privateWrite(refreshPath, { version: metadata.version });
+  const refresh = await privateRead(refreshPath).catch((error) => {
+    if (error.code !== "ENOENT") throw error;
+  });
   await privateDirectory(modules);
   let exists = false;
   try {
@@ -204,7 +212,7 @@ if (process.env.TOTEM_RUNTIME_ENV_LOADED === entry) {
     supervisor,
     directory: runtime,
     version: metadata.version,
-    upgraded: Boolean(previousVersion && previousVersion !== metadata.version),
+    upgraded: refresh?.version === metadata.version,
   };
 }
 const xml = (value) =>
@@ -293,23 +301,51 @@ export async function installRuntimeService(runtime, env = process.env, options
   const run = options.execute ?? execute;
   const node = process.execPath;
   const home = env.HOME ?? env.USERPROFILE ?? homedir();
-  if (runtime.upgraded && platform !== "win32") {
+  const acknowledged = async (result) => {
+    if (runtime.version)
+      await privateWrite(join(runtime.directory, "service-refresh.json"), { version: null });
+    return result;
+  };
+  if (runtime.upgraded) {
     try {
       const status = await privateRead(join(runtime.directory, "supervisor.json"));
-      const { readSupervisorOwner } = await import("./automatic-runtime.mjs");
+      const { readSupervisorOwner, processIdentity } = await import("./automatic-runtime.mjs");
       const owner = (await readSupervisorOwner(join(runtime.directory, "supervisor.lock")))?.owner;
-      if (Number.isSafeInteger(status.pid) && status.pid > 1 && owner?.pid === status.pid) {
-        const processInfo = await run("ps", ["-p", String(status.pid), "-o", "args="], {
+      if (
+        Number.isSafeInteger(status.pid) &&
+        status.pid > 1 &&
+        owner?.pid === status.pid &&
+        owner.identity &&
+        (await (options.processIdentity ?? processIdentity)(status.pid)) === owner.identity
+      ) {
+        const invocation =
+          platform === "win32"
+            ? powershellInvocation(
+                `(Get-CimInstance Win32_Process -Filter 'ProcessId=${status.pid}').CommandLine`,
+                env,
+              )
+            : { command: "ps", args: ["-p", String(status.pid), "-o", "args="] };
+        const processInfo = await run(invocation.command, invocation.args, {
           encoding: "utf8",
           timeout: 3000,
           maxBuffer: 8192,
         });
-        if (processInfo.stdout.trim() === `${node} ${runtime.supervisor}`) {
-          process.kill(status.pid, "SIGTERM");
+        const args = [...processInfo.stdout.trim().matchAll(/"([^"]*)"|(\S+)/g)].map(
+          (match) => match[1] ?? match[2],
+        );
+        const exact =
+          platform === "win32"
+            ? args.length === 2 &&
+              args[0].toLowerCase() === node.toLowerCase() &&
+              args[1].toLowerCase() === runtime.supervisor.toLowerCase()
+            : processInfo.stdout.trim() === `${node} ${runtime.supervisor}`;
+        if (exact) {
+          const signal = options.processSignal ?? process.kill;
+          signal(status.pid, "SIGTERM");
           const deadline = Date.now() + 20000;
           while (Date.now() < deadline) {
             try {
-              process.kill(status.pid, 0);
+              signal(status.pid, 0);
             } catch (error) {
               if (error.code === "ESRCH") break;
               throw error;
@@ -424,12 +460,17 @@ export async function installRuntimeService(runtime, env = process.env, options
         startupCode = "STARTUP_DISABLED";
         throw new Error("Automatic startup was disabled by the owner.");
       }
-      // Preserve an already running supervisor; its launcher uses current.json after restart.
+      // Restart the registered entry in place. Unregister/bootstrap races with
+      // launchd's own KeepAlive recovery and can temporarily lose registration.
       try {
-        await run("launchctl", ["print", `${domain}/${label}`]);
+        const loaded = await run("launchctl", ["print", `${domain}/${label}`]);
+        if (
+          !loaded.stdout.includes(`program = ${node}`) ||
+          !loaded.stdout.includes(runtime.supervisor)
+        )
+          throw new Error("The loaded launch agent does not match this runtime.");
         if (runtime.upgraded) {
-          await run("launchctl", ["bootout", `${domain}/${label}`]);
-          await run("launchctl", ["bootstrap", domain, path]);
+          await run("launchctl", ["kickstart", "-k", `${domain}/${label}`]);
         }
       } catch {
         await run("launchctl", ["bootstrap", domain, path]);
@@ -441,7 +482,7 @@ export async function installRuntimeService(runtime, env = process.env, options
         !verified.stdout.includes(runtime.supervisor)
       )
         throw new Error("The loaded launch agent does not match this runtime.");
-      return { mode: "launchd", persistent: true, label, path };
+      return acknowledged({ mode: "launchd", persistent: true, label, path });
     }
     if (platform === "linux") {
       const path = join(home, ".config", "systemd", "user", unit);
@@ -462,12 +503,12 @@ export async function installRuntimeService(runtime, env = process.env, options
       await run("systemctl", ["--user", "daemon-reload"]);
       await run("systemctl", ["--user", "enable", "--now", unit]);
       if (runtime.upgraded) await run("systemctl", ["--user", "restart", unit]);
-      return { mode: "systemd-user", persistent: true, label: unit, path };
+      return acknowledged({ mode: "systemd-user", persistent: true, label: unit, path });
     }
     if (platform === "win32") {
       windowsRegistration = await windowsStartup(runtime, node, task, env, run);
       if (windowsRegistration.mode === "scheduled-task")
-        return { mode: "scheduled-task", persistent: true, label: task };
+        return acknowledged({ mode: "scheduled-task", persistent: true, label: task });
     }
   } catch {
     /* Ephemeral/headless hosts often have no user service manager. */
@@ -481,7 +522,7 @@ export async function installRuntimeService(runtime, env = process.env, options
   child.on("error", () => {});
   child.unref();
   return windowsRegistration?.mode === "startup-shortcut"
-    ? { mode: "startup-shortcut", persistent: true, label: task }
+    ? acknowledged({ mode: "startup-shortcut", persistent: true, label: task })
     : {
         mode: "background-supervisor",
         persistent: false,

package/bin/totem.mjs

@@ -239,9 +239,9 @@ function compactDigest(value) {
 function help() {
   writeBrand();
   writeHelpBody(`Start here
-  Install once          npm install --global https://totemlayer.com/downloads/totemlayer-0.1.42.tgz
+  Install once          npm install --global https://totemlayer.com/downloads/totemlayer-0.1.44.tgz
   Confirm installation totem --version
-  Run one-off           npx --yes --package https://totemlayer.com/downloads/totemlayer-0.1.42.tgz totem --help
+  Run one-off           npx --yes --package https://totemlayer.com/downloads/totemlayer-0.1.44.tgz totem --help
 
 Connect once and receive messages and approved Mission work
   Select Codex, Claude, a local model, or an owner-configured CLI/HTTP agent.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "totemlayer",
-  "version": "0.1.42",
+  "version": "0.1.44",
   "description": "Cross-platform CLI for TotemLayer agent identity and authorization",
   "type": "module",
   "bin": {