totemlayer 0.1.16 → 0.1.17

package/README.md

@@ -9,26 +9,26 @@ it does not include the TotemLayer web application or server source.
 Node.js 22.14 or newer is required. Install the current release:
 
 ```sh
-npm install --global --foreground-scripts https://totemlayer.com/downloads/totemlayer-0.1.12.tgz
+npx totemlayer@latest install
 ```
 
-The installer includes the automatic listener, opens a one-time Totem sign-in, and saves the approved connection privately. Choose your agent in the browser. You do not need to create or copy a connection key or run a separate start command. If installation scripts were disabled, run `totem login` once. On headless hosts, use `totem login --no-browser` and open its printed connection link on your own device.
+The installer includes the automatic listener, opens a one-time Totem sign-in, and saves the approved connection privately. Choose your agent in the browser. You do not need to create or copy a connection key or run a separate start command. This explicitly runs Totem setup even when npm dependency install scripts are disabled. The listener is saved in private storage and does not depend on the npx cache. On headless hosts, use `npx totemlayer@latest login --no-browser` and open its printed connection link on your own device.
 
 Totem detects an installed, signed-in Codex or Claude Code client, an installed local Ollama/Qwen model, or an owner-configured CLI/HTTP agent. It uses that executor for messages, Chat, and approved Missions. If no executor is available yet, the connection stays saved while you install/sign in to your AI client. Totem does not supply another provider's paid account or API credentials. Coding Missions additionally need an explicitly approved checkout.
 
 The listener runs independently of the terminal, restarts after failure, and resumes after login on macOS, Linux user-service hosts, and Windows. On headless hosts without a service manager, it starts a background supervisor. A destroyed host still needs persistent private storage or its environment's secret provisioning; an installed listener cannot keep a destroyed host alive.
 
 ```sh
-totem status --profile YOUR_AGENT_UUID
-totem stop --profile YOUR_AGENT_UUID
-totem start --profile YOUR_AGENT_UUID --background
+npx totemlayer@latest status --profile YOUR_AGENT_UUID
+npx totemlayer@latest stop --profile YOUR_AGENT_UUID
+npx totemlayer@latest start --profile YOUR_AGENT_UUID --background
 ```
 
-Stop pauses automatic processing until you explicitly start it again. Upgrades reuse saved connections and journals. To opt out of automatic setup for a package build or CI, set `TOTEM_AUTO_START=0`; CI environments also skip postinstall setup.
+Stop pauses automatic processing until you explicitly start it again. Upgrades reuse saved connections and journals. For optional global installation, run `npm install -g totemlayer` followed by `totem install`. To opt out of lifecycle setup for a package build or CI, set `TOTEM_AUTO_START=0`; CI environments also skip postinstall setup.
 
-For custom executors, set `TOTEM_PROVIDER=command` with `TOTEM_AGENT_COMMAND` and JSON `TOTEM_AGENT_COMMAND_ARGS`, or `TOTEM_PROVIDER=http` with `TOTEM_AGENT_URL` and optional `TOTEM_AGENT_TOKEN_ENV`, before installing or running `totem login`. Provider credentials remain separate from Totem credentials. Local model selection can be pinned with `TOTEM_MODEL`.
+For custom executors, set `TOTEM_PROVIDER=command` with `TOTEM_AGENT_COMMAND` and JSON `TOTEM_AGENT_COMMAND_ARGS`, or `TOTEM_PROVIDER=http` with `TOTEM_AGENT_URL` and optional `TOTEM_AGENT_TOKEN_ENV`, before installing or running `npx totemlayer@latest login`. Provider credentials remain separate from Totem credentials. Local model selection can be pinned with `TOTEM_MODEL`.
 
-Advanced setup still accepts a private `--key-file`, explicit provider and repository roots. It saves the connection, starts supervised execution, and installs managed MCP for Codex/Claude by default. `--no-start` and `--no-mcp` provide explicit opt-outs. Existing configuration changes require `--replace` where appropriate. Restart your AI app and call `totem_get_identity` to verify MCP; actual worker state is reported separately by `totem status`.
+Advanced setup still accepts a private `--key-file`, explicit provider and repository roots. It saves the connection, starts supervised execution, and installs managed MCP for Codex/Claude by default. `--no-start` and `--no-mcp` provide explicit opt-outs. Existing configuration changes require `--replace` where appropriate. Restart your AI app and call `totem_get_identity` to verify MCP; actual worker state is reported separately by `npx totemlayer@latest status`.
 
 The package contains the CLI, local MCP server, and provider-independent worker. It does not distribute the private web application. Other languages can use the [HTTPS API](https://totemlayer.com/api/v1/openapi.json). The included TotemLayer CLI Use License permits unmodified use with TotemLayer-compatible services.
 
@@ -61,7 +61,7 @@ Receiver — create a five-minute challenge:
 export TOTEM_URL="https://totemlayer.com"
 export TOTEM_API_KEY="$VERIFIER_KEY"
 
-totem challenge \
+npx totemlayer@latest challenge \
   --presenter-agent "$PRESENTER_AGENT_ID" \
   --action quote.request \
   --request-file request.json \
@@ -78,7 +78,7 @@ Presenter — create a one-minute proof:
 ```bash
 export TOTEM_AGENT_API_KEY="$PRESENTER_KEY"
 
-totem present \
+npx totemlayer@latest present \
   --credential-id "$CREDENTIAL_ID" \
   --challenge-file challenge.json \
   --json > presentation.json
@@ -89,7 +89,7 @@ Return `presentation.json` to the receiver. Receiver — consume it once:
 ```bash
 export TOTEM_API_KEY="$VERIFIER_KEY"
 
-totem verify \
+npx totemlayer@latest verify \
   --challenge-file challenge.json \
   --presentation-file presentation.json \
   --request-file request.json \
@@ -121,7 +121,7 @@ compatibility.
 $env:TOTEM_URL = "https://totemlayer.com"
 $env:TOTEM_API_KEY = $env:VERIFIER_KEY
 
-totem challenge `
+npx totemlayer@latest challenge `
   --presenter-agent $env:PRESENTER_AGENT_ID `
   --action quote.request `
   --request-file request.json `
@@ -130,14 +130,14 @@ totem challenge `
 
 $env:TOTEM_AGENT_API_KEY = $env:PRESENTER_KEY
 
-totem present `
+npx totemlayer@latest present `
   --credential-id $env:CREDENTIAL_ID `
   --challenge-file challenge.json `
   --json | Set-Content -Encoding UTF8 presentation.json
 
 $env:TOTEM_API_KEY = $env:VERIFIER_KEY
 
-totem verify `
+npx totemlayer@latest verify `
   --challenge-file challenge.json `
   --presentation-file presentation.json `
   --request-file request.json `
@@ -152,7 +152,7 @@ totem verify `
 
 ## Procurement sandbox
 
-`totem rfq` is a sandbox and self-hosted demonstration command. It is not
+`npx totemlayer@latest rfq` is a sandbox and self-hosted demonstration command. It is not
 enabled on the production `totemlayer.com` service. Point `TOTEM_URL` at a
 TotemLayer deployment with the procurement demo enabled and use an
 `operator.rfq.execute` key.
@@ -165,16 +165,16 @@ legacy `AGENTTRUST_*` environment-variable aliases. New integrations should use
 
 ## Agent messaging and code collaboration
 
-The local build includes `totem network` and the Totem MCP server. Run
-`totem network --help` for the full command list. Two owners can each connect
-their own Codex or Claude client to Totem MCP and opt into `totem network work`
+The local build includes `npx totemlayer@latest network` and the Totem MCP server. Run
+`npx totemlayer@latest network --help` for the full command list. Two owners can each connect
+their own Codex or Claude client to Totem MCP and opt into `npx totemlayer@latest network work`
 for one exact peer and one Git checkout. Then one chat request can create a
 shared coding task; the listeners pick up the peer's work and later replies in
 each owner's own AI account. They do not share model or GitHub credentials.
 
 The listener runs a separate local CLI session; it does not wake or reuse a
 closed desktop chat. Both owners must give their own Git account access to the
-repository and keep their local listener running. Run `totem network --help`
+repository and keep their local listener running. Run `npx totemlayer@latest network --help`
 for setup requirements and security boundaries.
 
 ## Connect AI apps with MCP
@@ -185,9 +185,9 @@ After installing the CLI and saving your own agent key in a
 private file, let Totem add the local MCP connection to Codex or Claude Code:
 
 ```sh
-totem mcp install codex --key-file /absolute/path/to/your-agent.key \
+npx totemlayer@latest mcp install codex --key-file /absolute/path/to/your-agent.key \
   --base-url https://totem-network-staging.linbrandon48.workers.dev
-# Or: totem mcp install claude --key-file /absolute/path/to/your-agent.key \
+# Or: npx totemlayer@latest mcp install claude --key-file /absolute/path/to/your-agent.key \
 #       --base-url https://totem-network-staging.linbrandon48.workers.dev
 ```
 
@@ -197,7 +197,7 @@ entry. It passes the **file path**, never the key value, to the AI client.
 Restart the AI app and ask it to call `totem_get_identity`. The CLI package must
 remain installed for the MCP connection to run. On macOS/Linux the key file
 must not be readable by other users (`chmod 600` works). Run
-`totem mcp install --help` for options, including a custom server name.
+`npx totemlayer@latest mcp install --help` for options, including a custom server name.
 
 The installer is included from 0.1.3 onward. Version 0.1.4 supports native
 Windows MCP setup and on-device approval on Windows and Linux as well as macOS.
@@ -206,7 +206,7 @@ clean clone, ask the AI app to call `totem_preview_local_collaboration`, check
 the exact peer/repository/base commit, then call owner-approved
 `totem_enable_local_collaboration`. On Linux, the desktop approval uses
 `zenity` or `kdialog`; headless sessions still use the explicit
-`totem network work` listener. Each owner can check or stop the listener from
+`npx totemlayer@latest network work` listener. Each owner can check or stop the listener from
 the same chat. On Windows, run both Codex and Totem in the same environment
 (native Windows or WSL2); the native approval dialog is for Windows desktop
 sessions. A Windows key file must be protected by its owner's filesystem ACL.
@@ -234,7 +234,7 @@ acknowledge work, and manage tasks:
 ```sh
 export TOTEM_BASE_URL=http://localhost:3413
 export TOTEM_NETWORK_API_KEY_FILE="$HOME/.totem-agent-key"
-totem mcp
+npx totemlayer@latest mcp
 ```
 
 Add it to an MCP client without putting the credential itself in the configuration:
@@ -243,8 +243,8 @@ Add it to an MCP client without putting the credential itself in the configurati
 {
   "mcpServers": {
     "totem": {
-      "command": "totem",
-      "args": ["mcp"],
+      "command": "npx",
+      "args": ["--yes", "totemlayer@latest", "mcp"],
       "env": {
         "TOTEM_BASE_URL": "http://localhost:3413",
         "TOTEM_NETWORK_API_KEY_FILE": "/absolute/path/to/private-agent.key"
@@ -261,24 +261,14 @@ uses stdio and writes protocol messages only to stdout; operational errors go to
 ```sh
 export TOTEM_BASE_URL=http://localhost:3413
 export TOTEM_NETWORK_API_KEY_FILE="$HOME/.totem-agent-key" # chmod 600 this file
-totem network me --json
-totem network run --provider qwen-local --qwen-url http://127.0.0.1:8087/v1 --model qwen3.5-9b
+npx totemlayer@latest network me --json
+npx totemlayer@latest network run --provider qwen-local --qwen-url http://127.0.0.1:8087/v1 --model qwen3.5-9b
 ```
 
 Register an agent and create its key in **Agents** (`/communications?view=setup`). Open **Chat** in Totem to talk to the running agent. The native Qwen server and named model must already be running at the configured loopback endpoint; the CLI does not download them or use Ollama on this path. Personal agents do not require a company domain.
 
 Commands include `me`, `send`, `inbox`, `reply`, `ack`, `listen`, `chat list`, `chat show`, and `chat updates`. Output is JSON; `--json` also emits errors as JSON on stdout. `listen` is an at-least-once unread stream with explicit acknowledgment. `run` calls a real loopback model, maintains heartbeat and leases, and keeps a private replay journal. Use `--allow-agent <exact-address>` to allow its bounded `ask_agent` tool. No arbitrary shell or external action tools are installed.
 
-`run` and local Mission workers include a customer-side inspector before model input
-and Totem-controlled actions. Built-in rules are a baseline; set both
-`TOTEM_INSPECTOR_URL=http://127.0.0.1:9000/v1/chat/completions` and
-`TOTEM_INSPECTOR_MODEL=<installed-security-classifier>` for additional local
-classification. Configured classifier failures block processing. The classifier must
-return JSON `{"decision":"allow"}` or `{"decision":"block"}` as assistant content.
-Unsupported binary message files are blocked. See `docs/network/customer-inspector.md`
-in the source repository for coverage and limits. This does not encrypt ordinary CLI
-messages or intercept tools inside independent external agent processes.
-
 Packing this package inside the source repository builds and embeds the current Totem SDK through
 `prepack`. The MCP server uses the declared Model Context Protocol and Zod runtime dependencies;
 installation automatically configures the listener; use `TOTEM_AUTO_START=0` for CI. See
@@ -297,4 +287,4 @@ MCP supplies `totem_list_missions`, `totem_get_mission`, and `totem_delegate_mis
 
 ## Automatic cloud startup
 
-Use the same installation command above in a cloud environment. Browser approval connects its private runtime automatically. A headless installer prints a link; no other agent needs to pass credentials manually. To provision replacement hosts without another browser approval, use the environment secret store for `TOTEM_NETWORK_API_KEY` or `TOTEM_NETWORK_API_KEY_FILE`, optionally `TOTEM_AGENT_ID`, and persist `TOTEM_CONFIG_DIR`. Run `totem login --no-browser` in the startup template. This reuses and supervises the saved connection. See [cloud setup](https://github.com/linbrandon4/Totem/blob/codex/agent-worker-adapters/docs/network/cloud-setup.md).
+Use the same installation command above in a cloud environment. Browser approval connects its private runtime automatically. A headless installer prints a link; no other agent needs to pass credentials manually. To provision replacement hosts without another browser approval, use the environment secret store for `TOTEM_NETWORK_API_KEY` or `TOTEM_NETWORK_API_KEY_FILE`, optionally `TOTEM_AGENT_ID`, and persist `TOTEM_CONFIG_DIR`. Run `npx totemlayer@latest login --no-browser` in the startup template. This reuses and supervises the saved connection. See [cloud setup](https://github.com/linbrandon4/Totem/blob/codex/agent-worker-adapters/docs/network/cloud-setup.md).

package/bin/executor-readiness.mjs

@@ -5,32 +5,62 @@ import { privateRead, privateWrite } from "./runtime-installation.mjs";
 import { runtimeErrorCode } from "./runtime-diagnostics.mjs";
 
 export async function verifyExecutorReady(profile, env = process.env, options = {}) {
-  const version = options.version ?? JSON.parse(await readFile(new URL("../package.json", import.meta.url), "utf8")).version;
+  const version =
+    options.version ??
+    JSON.parse(await readFile(new URL("../package.json", import.meta.url), "utf8")).version;
   const file = join(profile.stateDirectory, "executor-readiness.json");
-  const binding = JSON.stringify([profile.agentId, profile.provider, profile.client, profile.model, profile.command, profile.commandArgs, profile.agentUrl, profile.qwenUrl, profile.ollamaUrl, profile.nimUrl]);
-  const previous = await privateRead(file).catch(error => {
+  const binding = JSON.stringify([
+    profile.agentId,
+    profile.provider,
+    profile.client,
+    profile.model,
+    profile.command,
+    profile.commandArgs,
+    profile.agentUrl,
+    profile.qwenUrl,
+    profile.ollamaUrl,
+    profile.nimUrl,
+  ]);
+  const previous = await privateRead(file).catch((error) => {
     if (error.code !== "ENOENT") throw error;
     return null;
   });
-  if (previous?.version === version && previous.binding === binding && previous.ready === true) return previous;
+  if (previous?.version === version && previous.binding === binding && previous.ready === true)
+    return previous;
   let response;
-  try { response = await (options.generate ?? modelReply)({
-    provider: profile.client ?? profile.provider,
-    model: profile.client && profile.provider === "qwen-local" ? "default" : profile.model,
-    origin: profile.ollamaUrl ?? "http://127.0.0.1:11434",
-    qwenUrl: profile.qwenUrl,
-    nimUrl: profile.nimUrl,
-    adapterSettings: { ...profile, environment: env },
-    messages: [{ role: "user", content: "This is a connection readiness check. Reply READY. No tools, file reads or external actions are authorized." }],
-    tools: [],
-    signal: options.signal ?? new AbortController().signal,
-    timeoutMs: 30000,
-  }); } catch (error) {
-    await privateWrite(file, { version, binding, ready: false, code: runtimeErrorCode(error), checkedAt: new Date().toISOString() });
+  try {
+    response = await (options.generate ?? modelReply)({
+      provider: profile.client ?? profile.provider,
+      model: profile.client && profile.provider === "qwen-local" ? "default" : profile.model,
+      origin: profile.ollamaUrl ?? "http://127.0.0.1:11434",
+      qwenUrl: profile.qwenUrl,
+      nimUrl: profile.nimUrl,
+      adapterSettings: { ...profile, environment: env },
+      messages: [
+        {
+          role: "user",
+          content:
+            "This is a connection readiness check. Reply READY. No tools, file reads or external actions are authorized.",
+        },
+      ],
+      tools: [],
+      signal: options.signal ?? new AbortController().signal,
+      timeoutMs: 30000,
+    });
+  } catch (error) {
+    await privateWrite(file, {
+      version,
+      binding,
+      ready: false,
+      code: runtimeErrorCode(error),
+      checkedAt: new Date().toISOString(),
+    });
     throw error;
   }
   if (typeof response?.content !== "string" || !response.content.trim())
-    throw Object.assign(new Error("The selected executor did not complete its readiness check."), { code: "INVALID_AGENT_RESULT" });
+    throw Object.assign(new Error("The selected executor did not complete its readiness check."), {
+      code: "INVALID_AGENT_RESULT",
+    });
   const record = { version, binding, ready: true, checkedAt: new Date().toISOString() };
   await privateWrite(file, record);
   return record;

package/bin/inbox-queue.mjs

@@ -1,4 +1,5 @@
 import { setTimeout as sleep } from "node:timers/promises";
+import { transientNetworkError } from "./network-retry.mjs";
 
 // Polling is independent of generation. Unrelated conversations can make
 // progress while one provider turn is slow; one conversation stays ordered.
@@ -11,6 +12,7 @@ export async function runInboxQueue({
   concurrency = 2,
   shouldContinue = () => true,
   once = false,
+  onPollError = () => {},
 }) {
   if (!Number.isInteger(concurrency) || concurrency < 1 || concurrency > 4)
     throw new Error("Inbox concurrency must be between one and four.");
@@ -24,17 +26,28 @@ export async function runInboxQueue({
   try {
     do {
       const oldest = new Map();
-      for await (const message of messages(signal)) {
+      try {
+        for await (const message of messages(signal)) {
+          if (signal.aborted) break;
+          if (
+            active.has(message.id) ||
+            conversations.has(message.conversationId) ||
+            attempted.has(message.id)
+          )
+            continue;
+          if (!(await eligible(message))) continue;
+          // The server yields oldest first. Preserve that order within a chat.
+          if (!oldest.has(message.conversationId)) oldest.set(message.conversationId, message);
+        }
+      } catch (error) {
         if (signal.aborted) break;
-        if (
-          active.has(message.id) ||
-          conversations.has(message.conversationId) ||
-          attempted.has(message.id)
-        )
-          continue;
-        if (!(await eligible(message))) continue;
-        // The server yields oldest first. Preserve that order within a chat.
-        if (!oldest.has(message.conversationId)) oldest.set(message.conversationId, message);
+        if (!transientNetworkError(error)) throw error;
+        onPollError(error);
+        // A failed page must not cancel unrelated generation or dispatch a partial scan.
+        await sleep(Math.max(pollMs, 100), undefined, { signal }).catch((error) => {
+          if (!signal.aborted) throw error;
+        });
+        continue;
       }
       const pending = [...oldest.values()];
       // Give both the backlog and recent conversations a slot, rather than

package/bin/installation.mjs

@@ -21,9 +21,14 @@ export async function activateConnection(profile, env = process.env, options = {
   try {
     await (options.verifyExecutor ?? verifyExecutorReady)(profile, env);
   } catch (error) {
-    return { state: "needs_attention", ...service, entry: runtime.cli,
+    return {
+      state: "needs_attention",
+      ...service,
+      entry: runtime.cli,
       code: error.code ?? "EXECUTOR_NOT_READY",
-      message: "Your connection is saved, but the selected agent could not complete its startup check. Run totem status to inspect the blocker." };
+      message:
+        "Your connection is saved, but the selected agent could not complete its startup check. Run totem status to inspect the blocker.",
+    };
   }
   const { agentStartMain } = await import("./agent-runner.mjs");
   const started = await (options.start ?? agentStartMain)(
@@ -31,11 +36,22 @@ export async function activateConnection(profile, env = process.env, options = {
     { env, automatic: true, stdout: { write() {} } },
   );
   if (started !== 0)
-    return { state: "needs_attention", ...service, entry: runtime.cli, code: "WORKER_START_FAILED" };
+    return {
+      state: "needs_attention",
+      ...service,
+      entry: runtime.cli,
+      code: "WORKER_START_FAILED",
+    };
   const { readAgentRuntimeStatus } = await import("./agent-runner.mjs");
   const state = await (options.readStatus ?? readAgentRuntimeStatus)(profile);
   if (!state.running || !["connected", "working", "waiting"].includes(state.phase))
-    return { state: "needs_attention", ...service, entry: runtime.cli, code: state.blockerCode ?? "WORKER_NOT_READY", phase: state.phase };
+    return {
+      state: "needs_attention",
+      ...service,
+      entry: runtime.cli,
+      code: state.blockerCode ?? "WORKER_NOT_READY",
+      phase: state.phase,
+    };
   return { state: "running", ...service, entry: runtime.cli };
 }
 
@@ -141,14 +157,25 @@ export async function installationMain(args = [], options = {}) {
     const results = [];
     for (const name of savedProfiles) {
       const profile = await readAgentProfile(name, { environment });
-      results.push({ profile: name, ...(await (options.activateConnection ?? activateConnection)(profile, environment)) });
+      results.push({
+        profile: name,
+        ...(await (options.activateConnection ?? activateConnection)(profile, environment)),
+      });
     }
-    const ready = results.every(result => ["running", "paused"].includes(result.state));
-    const report = { installed: true, connection: "saved", automatic: true, ready, profiles: results, service };
+    const ready = results.every((result) => ["running", "paused"].includes(result.state));
+    const report = {
+      installed: true,
+      connection: "saved",
+      automatic: true,
+      ready,
+      profiles: results,
+      service,
+    };
     stdout.write(
       flags.json
         ? JSON.stringify(report) + "\n"
-        : ready ? "Totem's automatic listener reuses your saved connections; startup checks passed.\n"
+        : ready
+          ? "Totem's automatic listener reuses your saved connections; startup checks passed.\n"
           : "Totem is installed, but an agent failed its startup check. Run totem status to inspect it.\n",
     );
     return ready ? 0 : 1;

package/bin/mission-infrastructure.mjs

@@ -10,7 +10,6 @@ import {
   readPrivateRuntimeJson,
 } from "./mission-agent-session.mjs";
 import { inspectLocalRepository } from "./repository.mjs";
-import { customerInspector } from "./local-inspector.mjs";
 
 const execute = promisify(execFile);
 const sha = (value) => createHash("sha256").update(value).digest("hex");
@@ -252,13 +251,10 @@ export async function runInfrastructureWorkerCycle({
   infrastructureProvider,
   signal,
   emit = () => {},
-  inspector,
-  inspectorOptions,
 }) {
   const kind = candidateWorkItem?.metadata?.kind;
   if (!recoveryOnly && !KINDS.has(kind)) return false;
   if (recoveryOnly && !infrastructureProvider) return false;
-  inspector = customerInspector({ inspector, inspectorOptions });
   if (!_session || !infrastructureProvider)
     throw new Error("Infrastructure work requires the connected agent service.");
   assertMissionAgentSession(_session, baseUrl, expectedAgentId);
@@ -305,18 +301,6 @@ export async function runInfrastructureWorkerCycle({
       };
       await persist();
       const mission = await client.missions.get(missionId, { signal: activeSignal });
-      await inspector.assertAllowed(
-        "input",
-        {
-          goal: mission.goal,
-          workItem: item,
-          infrastructure: mission.infrastructure,
-          workItems: mission.workItems,
-          repository: mission.repository,
-        },
-        { signal: activeSignal },
-      );
-      record.originalTask = String(mission.goal ?? "");
       if (mission.infrastructure?.provider !== "local-static")
         throw new Error("Unsupported infrastructure provider.");
       const repository = await inspectLocalRepository({ TOTEM_REPOSITORY_ROOT: repositoryRoot });
@@ -382,11 +366,6 @@ export async function runInfrastructureWorkerCycle({
     emit({ type: "work_started", missionId, workItemId: record.workItemId, stage: record.kind });
     const action = record.kind === "infrastructure_deploy" ? "app.deploy" : "app.verify";
     if (record.state === "infra_source") {
-      await inspector.assertAllowed(
-        "action",
-        { action: "repository.read", resource: record.repositoryResource, source: record.source },
-        { task: record.originalTask, signal: activeSignal },
-      );
       const effect = await client.missions.reserveEffect(
         missionId,
         {
@@ -415,20 +394,6 @@ export async function runInfrastructureWorkerCycle({
         record.source.sourceDirectory,
         activeSignal,
       );
-      for (const file of bundle.files) {
-        const mediaType = MIME[extname(file.path).toLowerCase()];
-        if (
-          mediaType?.startsWith("text/") ||
-          mediaType === "application/json" ||
-          mediaType === "image/svg+xml"
-        )
-          await inspector.inspectFile(
-            file.path,
-            mediaType === "image/svg+xml" ? "application/xml" : mediaType,
-            Buffer.from(file.content, "base64"),
-            { task: record.originalTask, signal: activeSignal },
-          );
-      }
       if (
         record.kind === "infrastructure_verify" &&
         (bundle.bundleSha256 !== record.source.bundleSha256 ||
@@ -472,16 +437,6 @@ export async function runInfrastructureWorkerCycle({
       await persist();
     }
     if (record.state === "infra_reserved") {
-      await inspector.assertAllowed(
-        "action",
-        {
-          action,
-          resource: `totem:mission:${missionId}:app`,
-          parameters: record.parameters,
-          url: record.deploymentUrl,
-        },
-        { task: record.originalTask, signal: activeSignal },
-      );
       const effect = await client.missions.reserveEffect(
         missionId,
         {
@@ -548,10 +503,6 @@ export async function runInfrastructureWorkerCycle({
       await persist();
     }
     const summary = `${action === "app.deploy" ? "Published" : "Verified"} the reviewed static app locally. The preview is available while its deployment agent is connected.`;
-    await inspector.assertAllowed("output", record.receipt, {
-      task: record.originalTask,
-      signal: activeSignal,
-    });
     await client.missions.complete(
       missionId,
       record.workItemId,

package/bin/mission-worker.mjs

@@ -21,7 +21,6 @@ import { setTimeout as sleep } from "node:timers/promises";
 import { inspectLocalRepository } from "./repository.mjs";
 import { localClientEnvironment } from "./platform-client.mjs";
 import { localModelEndpoint } from "./local-model-provider.mjs";
-import { customerInspector } from "./local-inspector.mjs";
 import { externalModelReply, isExternalModelProvider } from "./model-adapter.mjs";
 import { runDockerNodeTests } from "./docker-test-sandbox.mjs";
 import { acquireMissionAgentSession, assertMissionAgentSession } from "./mission-agent-session.mjs";
@@ -753,10 +752,7 @@ export async function runCodexMissionAgent({
   stage,
   agentName,
   agentAddress,
-  inspector = customerInspector(),
-  task,
 }) {
-  await inspector.assertAllowed("input", prompt, { task, signal });
   if (provider !== "ollama-local")
     throw new Error(
       "The legacy Codex adapter requires explicit provider: ollama-local. Use runLocalMissionAgent for native Qwen by default.",
@@ -842,7 +838,6 @@ export async function runCodexMissionAgent({
       });
   }
   if (!final.trim()) throw new Error("The connected agent returned no final result.");
-  await inspector.assertAllowed("output", { text: final, commands }, { task, signal });
   return { text: final.slice(0, 32000), commands: commands.slice(-30) };
 }
 
@@ -909,14 +904,7 @@ export function redactRepositorySource(source) {
   return output;
 }
 
-export async function repositoryEvidence(
-  checkout,
-  stage,
-  checkoutInfo,
-  inspector = customerInspector(),
-  task,
-  signal,
-) {
+export async function repositoryEvidence(checkout, stage, checkoutInfo) {
   if (!["engineering", "review"].includes(stage)) return "";
   const tracked = (await git(checkout, "ls-files"))
     .split("\n")
@@ -947,9 +935,7 @@ export async function repositoryEvidence(
         throw new Error(`The reviewer cannot inspect the complete changed file: ${path}`);
       continue;
     }
-    const original = await readFile(absolute, "utf8");
-    await inspector.assertAllowed("tool-result", { path, source: original }, { task, signal });
-    const source = redactRepositorySource(original);
+    const source = redactRepositorySource(await readFile(absolute, "utf8"));
     const numbered = source
       .split("\n")
       .map((line, index) => `${index + 1}: ${line}`)
@@ -964,10 +950,7 @@ export async function repositoryEvidence(
   return JSON.stringify({ trackedFiles: paths, changedFiles: changed, files });
 }
 
-async function codeRepositoryEvidence(
-  checkout,
-  { repair = false, inspector = customerInspector(), task, signal } = {},
-) {
+async function codeRepositoryEvidence(checkout, { repair = false } = {}) {
   const checkoutPath = await realpath(checkout);
   const changed = repair
     ? [
@@ -1005,7 +988,6 @@ async function codeRepositoryEvidence(
       continue;
     }
     const content = await readFile(absolute, "utf8");
-    await inspector.assertAllowed("tool-result", { path, content }, { task, signal });
     if (
       /-----BEGIN [A-Z ]*PRIVATE KEY-----|\b(?:sk-[A-Za-z0-9_-]{20,}|gh[pousr]_[A-Za-z0-9_]{20,}|AKIA[0-9A-Z]{16})\b/.test(
         content,
@@ -1587,10 +1569,7 @@ async function runStructuredMissionAgent({
   reasoning = false,
   rejectionEvidenceDirectory,
   adapterSettings = {},
-  inspector = customerInspector(),
-  task,
 }) {
-  await inspector.assertAllowed("input", prompt, { task, signal });
   const regressionFile =
     stage === "code" && !repair ? await selectMissionRegressionTestFile(checkout) : null;
   const properties =
@@ -1651,9 +1630,8 @@ async function runStructuredMissionAgent({
     throw new Error("Specify the installed model for this provider.");
   const evidence =
     stage === "code"
-      ? await codeRepositoryEvidence(checkout, { repair, inspector, task, signal })
-      : await repositoryEvidence(checkout, stage, checkoutInfo, inspector, task, signal);
-  await inspector.assertAllowed("tool-result", evidence, { task, signal });
+      ? await codeRepositoryEvidence(checkout, { repair })
+      : await repositoryEvidence(checkout, stage, checkoutInfo);
   const regressionInstruction = regressionFile
     ? `\n\nWorker-selected regression file: ${JSON.stringify(regressionFile.path)}. Return exactly this one path in testChanges, as a new file. Do not edit, replace, or rename any existing test file in initial generation. The new .test.js file uses ${regressionFile.moduleType === "module" ? "ES modules: import test from 'node:test' and assert from 'node:assert/strict'" : "CommonJS: require('node:test') and require('node:assert/strict'); use an async test with dynamic import() if the source API is an ES module"}. Import the actual source API with paths relative to this file. Node --test discovers this filename. Baseline expectation changes for accepted new fields are reserved for exact-edit repair after actual test failure.`
     : "";
@@ -1662,7 +1640,6 @@ async function runStructuredMissionAgent({
   let correction = "";
   const useReasoning = reasoning === true && ["code", "review"].includes(stage);
   for (let attempt = 0; attempt < (stage === "code" ? 2 : 1); attempt += 1) {
-    await inspector.assertAllowed("input", correction, { task, signal });
     const generationLimit = useReasoning ? 8192 : stage === "code" ? 4096 : 2048;
     const data = await requestModel(endpoint, {
       method: "POST",
@@ -1709,25 +1686,15 @@ async function runStructuredMissionAgent({
       provider !== "ollama-local" ? data?.choices?.[0]?.message?.content : data?.message?.content;
     if (typeof result !== "string" || !result.trim())
       throw new Error("The local model returned no structured result.");
-    await inspector.assertAllowed("output", result, { task, signal: combined });
     if (stage !== "code") return { text: result.slice(0, 32000), commands: [] };
     try {
       return repair
-        ? await inspector.runAction(
-            { checkout, result },
-            (input) => applyModelFileEdits(input.checkout, input.result),
-            { task, signal: combined },
-          )
-        : await inspector.runAction(
-            { checkout, result },
-            (input) =>
-              applyModelFileChanges(input.checkout, input.result, {
-                requireRegressionTests: true,
-                requireSeparateTestChanges: true,
-                newRegressionTestPath: regressionFile.path,
-              }),
-            { task, signal: combined },
-          );
+        ? await applyModelFileEdits(checkout, result)
+        : await applyModelFileChanges(checkout, result, {
+            requireRegressionTests: true,
+            requireSeparateTestChanges: true,
+            newRegressionTestPath: regressionFile.path,
+          });
     } catch (error) {
       if (rejectionEvidenceDirectory) {
         await mkdir(rejectionEvidenceDirectory, {
@@ -2419,7 +2386,6 @@ async function settleCompletedResult(client, missionId, workItemId, path, record
     stage: record.stage,
     result: record.result,
     leaseToken: record.leaseToken,
-    originalTask: record.originalTask,
   });
 }
 
@@ -2431,7 +2397,6 @@ async function recoverReadyCompletions(
   signal,
   emit,
   limit = Infinity,
-  inspector = customerInspector(),
 ) {
   let handled = 0;
   for (const name of await readdir(directory)) {
@@ -2479,7 +2444,6 @@ async function recoverReadyCompletions(
         await reportBlockedCompletion(record);
         continue;
       }
-      await inspector.assertAllowed("output", record.result, { task: record.originalTask, signal });
       if (record.state === "result_settling")
         await settleCompletedResult(client, missionId, workItemId, path, record, signal);
       await client.missions.complete(
@@ -2557,26 +2521,7 @@ export async function runMissionWorker({
   emit = () => {},
   runAgent = runLocalMissionAgent,
   adapterSettings = {},
-  inspector,
-  inspectorOptions,
 }) {
-  inspector = customerInspector({ inspector, inspectorOptions });
-  const uncheckedRunAgent = runAgent;
-  let originalTask;
-  runAgent = async (input) => {
-    const result = await inspector.runAction(
-      {
-        prompt: input.prompt,
-        checkout: input.checkout,
-        write: input.write ?? false,
-        stage: input.stage,
-      },
-      (snapshot) => uncheckedRunAgent({ ...input, ...snapshot, inspector, task: originalTask }),
-      { task: originalTask, signal: input.signal },
-    );
-    await inspector.assertAllowed("output", result, { task: originalTask, signal: input.signal });
-    return result;
-  };
   if (!UUID.test(missionId)) throw new Error("Provide a valid mission ID.");
   missionModelEndpoint(provider, { ollamaUrl, qwenUrl, nimUrl });
   model ??=
@@ -2655,7 +2600,6 @@ export async function runMissionWorker({
           signal,
           emit,
           _singleCycle ? 1 : Infinity,
-          inspector,
         );
         if (_singleCycle && recovered) return { activity: "recovery", handled: recovered };
         const reconciled = await recoverKnownLocalTestFailures(
@@ -2668,7 +2612,6 @@ export async function runMissionWorker({
         );
         if (_singleCycle && reconciled) return { activity: "recovery", handled: reconciled };
         const mission = await client.missions.get(missionId, { signal });
-        originalTask = String(mission.goal ?? "");
         if (
           mission.status === "canceled" ||
           mission.status === "completed" ||
@@ -2713,32 +2656,6 @@ export async function runMissionWorker({
           )
             continue;
           processed += 1;
-          try {
-            await inspector.assertAllowed(
-              "input",
-              {
-                goal: mission.goal,
-                desiredOutput: mission.desiredOutput,
-                repository: mission.repository,
-                workItem,
-                events: mission.events ?? [],
-                artifacts: mission.artifacts ?? [],
-              },
-              { task: originalTask, signal },
-            );
-          } catch (error) {
-            if (!error.code?.startsWith("INSPECTION_")) throw error;
-            if (!reportedAttention.has(workItem.id)) {
-              await recordRecoveryBlocker(workItem, error.code);
-              emit({
-                type: "needs_attention",
-                workItemId: workItem.id,
-                code: error.code,
-                message: "The customer-side inspector blocked this assignment before launch.",
-              });
-            }
-            continue;
-          }
           let stage;
           try {
             stage = stageOf(workItem);
@@ -3091,16 +3008,6 @@ export async function runMissionWorker({
                   ? ["repository.read"]
                   : [];
           const authorizeLocalLaunch = async () => {
-            await inspector.assertAllowed(
-              "action",
-              {
-                stage,
-                actions: repositoryActions,
-                resource: mission.repository?.url ?? null,
-                objective: workItem.objective,
-              },
-              { task: originalTask, signal: combined },
-            );
             // Renewal rechecks mission state, current credential, membership, and the lease.
             await client.missions.renew(missionId, workItem.id, claim.leaseToken, {
               signal: combined,
@@ -3149,15 +3056,6 @@ export async function runMissionWorker({
               for (const repositoryAction of repositoryActions) {
                 if (!mission.repository)
                   throw new Error("This assignment needs a selected repository.");
-                await inspector.assertAllowed(
-                  "action",
-                  {
-                    action: repositoryAction,
-                    resource: mission.repository.url,
-                    objective: workItem.objective,
-                  },
-                  { task: originalTask, signal: combined },
-                );
                 const reservation =
                   (prior?.reservedEffects ?? []).find(
                     (effect) =>
@@ -3199,16 +3097,6 @@ export async function runMissionWorker({
                   effectIds,
                 });
                 for (const effectId of effectIds) {
-                  await inspector.assertAllowed(
-                    "action",
-                    {
-                      effectId,
-                      actions: repositoryActions,
-                      resource: mission.repository.url,
-                      objective: workItem.objective,
-                    },
-                    { task: originalTask, signal: combined },
-                  );
                   const dispatch = await client.missions.dispatchEffect(
                     missionId,
                     effectId,
@@ -3548,7 +3436,6 @@ export async function runMissionWorker({
                   state: "result_settling",
                   stage,
                   result,
-                  originalTask,
                   leaseToken: claim.leaseToken,
                   effectIds: [...effectIds],
                   repositoryUrl: mission.repository.url,
@@ -3569,15 +3456,10 @@ export async function runMissionWorker({
                   state: "ready",
                   stage,
                   result,
-                  originalTask,
                   leaseToken: claim.leaseToken,
                 });
               }
             }
-            await inspector.assertAllowed("output", result, {
-              task: originalTask,
-              signal: combined,
-            });
             await client.missions.complete(
               missionId,
               workItem.id,

package/bin/model-adapter.mjs

@@ -7,11 +7,32 @@ import { installedClientInvocation, localClientEnvironment } from "./platform-cl
 import { WorkerError } from "./worker-core/errors.mjs";
 
 export function providerFailureCode(text) {
-  if (/unexpected argument|unknown option|unrecognized option|no such option|unknown flag/i.test(text)) return "AGENT_CLI_INCOMPATIBLE";
-  if (/not logged in|authentication required|invalid[_ ]api[_ ]key|unauthorized|refresh token.*(?:expired|reused)|sign in.*required/i.test(text)) return "AGENT_AUTH_REQUIRED";
-  if (/usage limit|rate limit|quota.*(?:exceeded|insufficient)|insufficient_quota|credit balance/i.test(text)) return "AGENT_QUOTA_EXCEEDED";
-  if (/sandbox.*(?:setup failed|not available|not configured|unsupported|error)|CreateProcessAsUser|error 1385/i.test(text)) return "AGENT_SANDBOX_UNAVAILABLE";
-  if (/model.*(?:not found|not supported|does not exist|not have access)|model_not_found/i.test(text)) return "AGENT_MODEL_UNAVAILABLE";
+  if (
+    /unexpected argument|unknown option|unrecognized option|no such option|unknown flag/i.test(text)
+  )
+    return "AGENT_CLI_INCOMPATIBLE";
+  if (
+    /not logged in|authentication required|invalid[_ ]api[_ ]key|unauthorized|refresh token.*(?:expired|reused)|sign in.*required/i.test(
+      text,
+    )
+  )
+    return "AGENT_AUTH_REQUIRED";
+  if (
+    /usage limit|rate limit|quota.*(?:exceeded|insufficient)|insufficient_quota|credit balance/i.test(
+      text,
+    )
+  )
+    return "AGENT_QUOTA_EXCEEDED";
+  if (
+    /sandbox.*(?:setup failed|not available|not configured|unsupported|error)|CreateProcessAsUser|error 1385/i.test(
+      text,
+    )
+  )
+    return "AGENT_SANDBOX_UNAVAILABLE";
+  if (
+    /model.*(?:not found|not supported|does not exist|not have access)|model_not_found/i.test(text)
+  )
+    return "AGENT_MODEL_UNAVAILABLE";
   return "AGENT_EXIT_FAILED";
 }
 
@@ -123,7 +144,8 @@ export async function externalModelReply({
       ];
       parseResult = (output) => {
         const result = JSON.parse(output);
-        if (result.is_error || result.subtype !== "success") throw new WorkerError(providerFailureCode(String(result.result ?? "")));
+        if (result.is_error || result.subtype !== "success")
+          throw new WorkerError(providerFailureCode(String(result.result ?? "")));
         return {
           status: "completed",
           output: result.structured_output

package/bin/network-retry.mjs

@@ -0,0 +1,26 @@
+import { pause } from "./network.mjs";
+
+export function transientNetworkError(error) {
+  return (
+    error?.status === 429 ||
+    error?.status >= 500 ||
+    ["NETWORK_BUSY", "NETWORK_ERROR", "TIMEOUT"].includes(error?.code)
+  );
+}
+
+// Only use for reads or mutations protected by a durable idempotency key.
+export async function retryNetwork(
+  operation,
+  { signal, onRetry = () => {}, delayMs = 1000, attempts = 4 } = {},
+) {
+  for (let attempt = 0; ; attempt++) {
+    signal?.throwIfAborted();
+    try {
+      return await operation();
+    } catch (error) {
+      if (signal?.aborted || !transientNetworkError(error) || attempt + 1 >= attempts) throw error;
+      onRetry(error);
+      await pause(Math.min(delayMs * 2 ** attempt, 10000), signal);
+    }
+  }
+}

package/bin/network-runtime.mjs

@@ -5,6 +5,7 @@ import { join } from "node:path";
 import { pause } from "./network.mjs";
 import { localModelEndpoint } from "./local-model-provider.mjs";
 import { runInboxQueue } from "./inbox-queue.mjs";
+import { retryNetwork, transientNetworkError } from "./network-retry.mjs";
 import { customerInspector, inspectNetworkMessage } from "./local-inspector.mjs";
 import { runtimeErrorCode } from "./runtime-diagnostics.mjs";
 import {
@@ -406,23 +407,38 @@ async function generate({
             new Error(
               "A previous provider turn has an uncertain outcome. Inspect its private journal before retrying.",
             ),
-            { code: "AGENT_OUTCOME_UNCERTAIN" },
+            {
+              code: state.externalFailure ?? "AGENT_OUTCOME_UNCERTAIN",
+              externalOutcomeUncertain: true,
+            },
           );
         state.externalPending = true;
         await journal.save(key, state);
       }
-      const response = await modelReply({
-        origin: settings.origin,
-        provider: settings.provider,
-        qwenUrl: settings.qwenUrl,
-        nimUrl: settings.nimUrl,
-        model: settings.model,
-        messages: state.messages,
-        tools,
-        signal,
-        timeoutMs: settings.modelTimeoutMs,
-        adapterSettings: settings.adapterSettings,
-      });
+      let response;
+      try {
+        response = await modelReply({
+          origin: settings.origin,
+          provider: settings.provider,
+          qwenUrl: settings.qwenUrl,
+          nimUrl: settings.nimUrl,
+          model: settings.model,
+          messages: state.messages,
+          tools,
+          signal,
+          timeoutMs: settings.modelTimeoutMs,
+          adapterSettings: settings.adapterSettings,
+        });
+      } catch (error) {
+        // Preserve a fixed diagnostic instead of hiding the original failure after restart.
+        // Keep externalPending: arbitrary external providers may have uncertain side effects.
+        if (isExternalModelProvider(settings.provider)) {
+          error.externalOutcomeUncertain = true;
+          state.externalFailure = runtimeErrorCode(error);
+          await journal.save(key, state);
+        }
+        throw error;
+      }
       await settings.inspector.assertAllowed("output", response, { task: text, signal });
       delete state.externalPending;
       state.messages.push(response);
@@ -575,10 +591,15 @@ export async function runRuntime(settings) {
   let fatalError;
   let diagnosticsSupported = false;
   let diagnostics = { phase: "starting" };
-  const packageVersion = JSON.parse(await readFile(new URL("../package.json", import.meta.url), "utf8")).version;
+  const packageVersion = JSON.parse(
+    await readFile(new URL("../package.json", import.meta.url), "utf8"),
+  ).version;
   const report = (error, context = {}) => {
-    diagnostics = { phase: "blocked", errorCode: runtimeErrorCode(error),
-      ...(typeof context.messageId === "string" ? { messageId: context.messageId } : {}) };
+    diagnostics = {
+      phase: "blocked",
+      errorCode: runtimeErrorCode(error),
+      ...(typeof context.messageId === "string" ? { messageId: context.messageId } : {}),
+    };
     if (settings.once) process.exitCode = 1;
     emit({
       type: "runtime_error",
@@ -599,9 +620,21 @@ export async function runRuntime(settings) {
   try {
     const beat = async () => {
       const result = await client.runtime.heartbeat(
-        { label: `${settings.provider}:${settings.model}`.slice(0, 100),
-          ...(diagnosticsSupported ? { diagnostics: { ...diagnostics, packageVersion, provider: settings.provider,
-            platform: ["darwin", "linux", "win32"].includes(process.platform) ? process.platform : "other" } } : {}) },
+        {
+          label: `${settings.provider}:${settings.model}`.slice(0, 100),
+          ...(diagnosticsSupported
+            ? {
+                diagnostics: {
+                  ...diagnostics,
+                  packageVersion,
+                  provider: settings.provider,
+                  platform: ["darwin", "linux", "win32"].includes(process.platform)
+                    ? process.platform
+                    : "other",
+                },
+              }
+            : {}),
+        },
         { signal },
       );
       diagnosticsSupported = result?.diagnosticsSupported === true;
@@ -642,6 +675,7 @@ export async function runRuntime(settings) {
       pollMs: settings.pollMs,
       concurrency: settings.messageConcurrency ?? 2,
       once: settings.once,
+      onPollError: (error) => report(error),
       shouldContinue: () => !settings.once || !humanDone,
       messages: (signal) =>
         client.messages.iterate({ direction: "inbound", unread: true, limit: 100 }, { signal }),
@@ -720,10 +754,12 @@ export async function runRuntime(settings) {
         } catch (error) {
           if (!signal.aborted) report(error, { messageId: message.id });
           if (error.status === 401) throw error;
-          if (error.status === 429 || error.status >= 500) throw error;
+          // Retry this durable message on the next poll without stopping other turns.
+          if (transientNetworkError(error)) return;
           if (
             (error.status >= 400 && error.status < 500) ||
-            error.code === "AGENT_OUTCOME_UNCERTAIN"
+            error.code === "AGENT_OUTCOME_UNCERTAIN" ||
+            error.externalOutcomeUncertain
           )
             await journal.save(`message-blocker:${message.id}`, {
               code: error.code ?? "MESSAGE_BLOCKED",
@@ -737,7 +773,20 @@ export async function runRuntime(settings) {
       }
     });
     do {
-      const commands = await client.chatCommands.list({ limit: 20 }, { signal });
+      let commands;
+      try {
+        commands = await retryNetwork(() => client.chatCommands.list({ limit: 20 }, { signal }), {
+          signal,
+          delayMs: settings.pollMs,
+          onRetry: report,
+        });
+      } catch (error) {
+        if (signal.aborted) break;
+        if (!transientNetworkError(error)) throw error;
+        report(error);
+        await pause(Math.max(settings.pollMs, 100), signal);
+        continue;
+      }
       for (const command of commands.data) {
         if (signal.aborted) break;
         let claim;
@@ -745,6 +794,10 @@ export async function runRuntime(settings) {
           claim = await client.chatCommands.claim(command.id, { signal });
         } catch (error) {
           if (error.status === 409) continue;
+          if (transientNetworkError(error)) {
+            report(error);
+            continue;
+          }
           throw error;
         }
         const leaseStop = new AbortController();

package/bin/runtime-diagnostics.mjs

@@ -1,12 +1,37 @@
 export const RUNTIME_ERROR_CODES = new Set([
-  "AGENT_START_FAILED", "AGENT_EXIT_FAILED", "AGENT_REPORTED_FAILURE", "INVALID_AGENT_RESULT",
-  "AGENT_CLI_INCOMPATIBLE", "AGENT_AUTH_REQUIRED", "AGENT_QUOTA_EXCEEDED", "AGENT_SANDBOX_UNAVAILABLE", "AGENT_MODEL_UNAVAILABLE",
-  "AGENT_OUTCOME_UNCERTAIN", "RUN_TIMEOUT", "RUN_CANCELLED", "OUTPUT_LIMIT_EXCEEDED",
-  "UNKNOWN_HTTP_OUTCOME", "HTTP_AGENT_FAILED", "INVALID_ADAPTER_CONFIG", "INVALID_ADAPTER_ENV",
-  "INSPECTION_BLOCKED", "INSPECTION_UNAVAILABLE", "INSPECTION_UNSUPPORTED_FILE",
-  "AGENT_REPLY_TIMEOUT", "INVALID_ASK", "TOOL_NOT_ALLOWED", "INVALID_PEER_REPLY",
-  "NETWORK_BUSY", "NETWORK_ERROR", "TIMEOUT", "CANCELED", "INVALID_NETWORK_CREDENTIAL",
-  "AGENT_IDENTITY_MISMATCH", "MODEL_ERROR", "MAX_STEPS", "INTERNAL_ERROR",
+  "AGENT_START_FAILED",
+  "AGENT_EXIT_FAILED",
+  "AGENT_REPORTED_FAILURE",
+  "INVALID_AGENT_RESULT",
+  "AGENT_CLI_INCOMPATIBLE",
+  "AGENT_AUTH_REQUIRED",
+  "AGENT_QUOTA_EXCEEDED",
+  "AGENT_SANDBOX_UNAVAILABLE",
+  "AGENT_MODEL_UNAVAILABLE",
+  "AGENT_OUTCOME_UNCERTAIN",
+  "RUN_TIMEOUT",
+  "RUN_CANCELLED",
+  "OUTPUT_LIMIT_EXCEEDED",
+  "UNKNOWN_HTTP_OUTCOME",
+  "HTTP_AGENT_FAILED",
+  "INVALID_ADAPTER_CONFIG",
+  "INVALID_ADAPTER_ENV",
+  "INSPECTION_BLOCKED",
+  "INSPECTION_UNAVAILABLE",
+  "INSPECTION_UNSUPPORTED_FILE",
+  "AGENT_REPLY_TIMEOUT",
+  "INVALID_ASK",
+  "TOOL_NOT_ALLOWED",
+  "INVALID_PEER_REPLY",
+  "NETWORK_BUSY",
+  "NETWORK_ERROR",
+  "TIMEOUT",
+  "CANCELED",
+  "INVALID_NETWORK_CREDENTIAL",
+  "AGENT_IDENTITY_MISMATCH",
+  "MODEL_ERROR",
+  "MAX_STEPS",
+  "INTERNAL_ERROR",
 ]);
 export function runtimeErrorCode(error) {
   return RUNTIME_ERROR_CODES.has(error?.code) ? error.code : "INTERNAL_ERROR";

package/bin/sdk/index.js

@@ -1,5 +1,4 @@
 import { TotemError } from "./errors.js";
-import { createLocalInspector, InspectionError } from "./inspector.js";
 import { idempotencyKey, sleep, Transport } from "./transport.js";
 import { assertInputFields, assistantCheckOptions, signalOnlyOptions } from "./request-options.js";
 export * from "./types.js";
@@ -113,11 +112,6 @@ export class Totem {
             },
             idempotencyKey: options.idempotencyKey ?? `sdk:reply:${id}`,
         })).data,
-        replyContent: async (id, content, options = {}) => (await this.#transport.request("POST", `/messages/${encodeURIComponent(id)}/reply`, {
-            ...options,
-            body: { content },
-            idempotencyKey: options.idempotencyKey ?? idempotencyKey(),
-        })).data,
         ack: async (id, options) => (await this.#transport.request("POST", `/messages/${encodeURIComponent(id)}/ack`, {
             ...options,
             body: {},
@@ -323,8 +317,6 @@ export class ConnectedAgent {
         if (!Number.isFinite(interval) || interval < 10)
             throw new TotemError("pollIntervalMs must be at least 10.", { code: "INVALID_CONFIG" });
         const controller = new AbortController();
-        const inspector = options.inspector ?? createLocalInspector();
-        const blocked = new Set();
         const report = (cause) => {
             this.#lastError = cause instanceof Error ? cause : new Error(String(cause));
             try {
@@ -340,42 +332,22 @@ export class ConnectedAgent {
                     for await (const message of this.client.messages.iterate({ direction: "inbound", unread: true, limit: 100 }, { signal: controller.signal })) {
                         if (controller.signal.aborted)
                             break;
-                        if (blocked.has(message.id))
-                            continue;
+                        const incoming = {
+                            ...message,
+                            text: message.content.type === "text"
+                                ? message.content.text
+                                : JSON.stringify(message.content.data),
+                            reply: (text, writeOptions = {}) => this.client.messages.reply(message.id, text, {
+                                ...writeOptions,
+                                idempotencyKey: writeOptions.idempotencyKey ?? `reply:${message.id}:0`,
+                            }),
+                            ack: () => this.client.messages.ack(message.id),
+                        };
                         try {
-                            if (message.content.type === "encrypted")
-                                throw new TotemError("Use E2eeTotem and pinned endpoint keys to process encrypted messages.", { code: "E2EE_CLIENT_REQUIRED" });
-                            await inspector.assertAllowed("input", { content: message.content, metadata: message.metadata ?? {} }, { signal: controller.signal });
-                            const files = message.attachments ?? [];
-                            const ids = new Set(files.map((file) => file.id));
-                            if (message.content.type === "text" &&
-                                message.content.attachments?.some((id) => !ids.has(id)))
-                                throw new InspectionError("INSPECTION_UNSUPPORTED_FILE");
-                            for (const file of files) {
-                                const downloaded = await this.client.attachments.download(file.id, {
-                                    signal: controller.signal,
-                                });
-                                await inspector.inspectFile(file.name, file.mediaType, downloaded.bytes, {
-                                    signal: controller.signal,
-                                });
-                            }
-                            const incoming = {
-                                ...message,
-                                text: message.content.type === "text"
-                                    ? message.content.text
-                                    : JSON.stringify(message.content.data),
-                                reply: (text, writeOptions = {}) => inspector.runAction({ id: message.id, text }, (input) => this.client.messages.reply(input.id, input.text, {
-                                    ...writeOptions,
-                                    idempotencyKey: writeOptions.idempotencyKey ?? `reply:${message.id}:0`,
-                                }), { signal: controller.signal }),
-                                ack: () => this.client.messages.ack(message.id),
-                            };
                             await handler(incoming);
                             await incoming.ack();
                         }
                         catch (error) {
-                            if (error instanceof InspectionError && error.code !== "INSPECTION_UNAVAILABLE")
-                                blocked.add(message.id);
                             report(error);
                         }
                     }
@@ -413,4 +385,3 @@ export class ConnectedAgent {
 /** Compatibility name for callers who prefer `new TotemAgent({ address, apiKey })`. */
 export class TotemAgent extends Totem {
 }
-export { createLocalInspector, InspectionError };

package/bin/totem.mjs

@@ -4,7 +4,7 @@ import { createHash, randomUUID } from "node:crypto";
 import { createReadStream } from "node:fs";
 import { stripVTControlCharacters } from "node:util";
 
-const CLI_VERSION = "0.1.15";
+const CLI_VERSION = "0.1.13";
 const DEFAULT_BASE_URL = "https://totemlayer.com";
 const API_KEY_PATTERN = /^at_(?:live|test)_[A-Za-z0-9_-]{20,}$/;
 const ACTION_PATTERN = /^[a-z0-9][a-z0-9._:-]*$/;

package/bin/worker-core/errors.mjs

@@ -26,7 +26,11 @@ const SAFE_CODES = new Set([
   "INVALID_PROMPT",
   "AGENT_START_FAILED",
   "AGENT_EXIT_FAILED",
-  "AGENT_CLI_INCOMPATIBLE", "AGENT_AUTH_REQUIRED", "AGENT_QUOTA_EXCEEDED", "AGENT_SANDBOX_UNAVAILABLE", "AGENT_MODEL_UNAVAILABLE",
+  "AGENT_CLI_INCOMPATIBLE",
+  "AGENT_AUTH_REQUIRED",
+  "AGENT_QUOTA_EXCEEDED",
+  "AGENT_SANDBOX_UNAVAILABLE",
+  "AGENT_MODEL_UNAVAILABLE",
   "AGENT_REPORTED_FAILURE",
   "UNKNOWN_HTTP_OUTCOME",
   "HTTP_AGENT_FAILED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "totemlayer",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "description": "Cross-platform CLI for TotemLayer agent identity and authorization",
   "type": "module",
   "bin": {

package/scripts/prepare.mjs

@@ -0,0 +1,20 @@
+import { execFileSync } from "node:child_process";
+import { mkdir, readdir, copyFile } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+
+// Build from the sibling source every time a distributable is packed.
+const sdk = fileURLToPath(new URL("../../sdk/", import.meta.url));
+const destination = new URL("../bin/sdk/", import.meta.url);
+execFileSync(process.platform === "win32" ? "npm.cmd" : "npm", ["run", "build", "--prefix", sdk], {
+  stdio: "inherit",
+});
+await mkdir(destination, { recursive: true });
+for (const name of await readdir(new URL("../../sdk/dist/", import.meta.url))) {
+  if (name.endsWith(".js"))
+    await copyFile(new URL(`../../sdk/dist/${name}`, import.meta.url), new URL(name, destination));
+}
+
+const workerCore = new URL("../bin/worker-core/", import.meta.url);
+await mkdir(workerCore, { recursive: true });
+for (const name of ["adapters.mjs", "errors.mjs"])
+  await copyFile(new URL(`../../agent-worker/${name}`, import.meta.url), new URL(name, workerCore));