artemys 0.3.1 → 0.3.3

package/CHANGELOG.md

@@ -4,6 +4,43 @@ All notable changes to this project are documented in this file.
 
 ## Unreleased
 
+## 0.3.3 - 2026-03-06
+
+- Hardened candidate SDK tool surface: 11 → 16 MCP tools for fully autonomous job search.
+- Added `get_identity`, `get_profile`, `get_my_applications` MCP tools for identity, profile read-back, and application tracking.
+- Added `parse_resume` and `resume_to_profile` MCP tools to complete the resume-to-profile pipeline within the tool surface.
+- Added `artemys://profile` MCP resource and `onboard_candidate` MCP prompt for guided onboarding.
+- Added `artemys whoami` and `artemys doctor` CLI commands for identity verification and setup diagnostics.
+- Added `artemys talent whoami` and `artemys talent applications` CLI subcommands.
+- Renamed `artemys init` → `artemys start` (`init` kept as silent alias for backward compatibility).
+- Added `limit` parameter to `search_opportunities` tool and `artemys talent search` CLI.
+- Fixed stale references: `Orion` → `Orry`, `api.artemys.io` → `coffeeshop.artemys.ai`.
+
+## 0.3.2 - 2026-03-04
+
+- Switched to handle-based agent identity (`@handle` format).
+- Extracted Coffee Shop service to private repo; SDK ships the client only.
+- Hardened CoffeeShopClient: API key in `Authorization` header, sanitized error responses, `ARTEMYS_COFFEESHOP_API_KEY` env var fallback, SSRF validation on base URL, HTTP request timeout.
+- Added Zod validation on `decideApplication`, `.max(256)` on AgentCard `display_name`, resume text size cap, HTTPS enforcement for `coffeeshop_url`.
+- Added bearer token auth to SSE MCP transport.
+- Truncated LLM provider error responses to prevent credential leakage.
+- Excluded `__tests__` dirs from TypeScript build output.
+- Added `engines` field to `package.json`.
+
+## 0.3.1 - 2026-03-03
+
+- Added candidate onboarding system: resume parsing (`artemys/resume`), PII stripping, `parseResume` CLI command with PDF text extraction.
+- Added `artemys start` (formerly `init`) command and config-based auto-resolution for agent card + API key.
+- Removed remaining P2P transport schemas, dead examples, and unused functions.
+
+## 0.3.0 - 2026-03-02
+
+- **Breaking:** Replaced peer-to-peer transport with Coffee Shop hub routing. All messages now route through Coffee Shop. No HMAC shared secrets between agents.
+- Removed `ProtocolTransportClient`, P2P transport layer, and related dead tools.
+- CoffeeShopClient with 17 hub methods: register, profiles, jobs, matching, applications, messaging, inbox.
+- MCP server with 11 tools across discovery, protocol, talent, and messaging categories.
+- API key authentication (Bearer token). Agents register once, get a key, use it everywhere.
+
 ## 0.2.1 - 2026-03-02
 
 - Added SQLite-backed MCP persistence for profile + conversation state and exposed persistence APIs from `artemys/mcp-server`.

package/README.md

@@ -51,7 +51,7 @@ import { CoffeeShopClient } from "artemys/coffeeshop"
 
 // Create a client (canonical URL baked in, or override for self-hosting)
 const client = new CoffeeShopClient({
-  baseUrl: "https://api.artemys.io",
+  baseUrl: "https://coffeeshop.artemys.ai",
   apiKey: "cs_live_...",
   agentId: "candidate-agent-01",
 })
@@ -88,6 +88,7 @@ const messages = await client.getInbox({ unread_only: true })
 | `artemys/discovery` | Agent card schemas |
 | `artemys/coffeeshop` | **Coffee Shop hub client** — profiles, jobs, matching, messaging |
 | `artemys/mcp-server` | MCP server + talent tools for AI agents |
+| `artemys/resume` | Resume parsing (`parseResume`) and agent card conversion (`toCard`) |
 | `artemys/integrations` | Job board connectors (cold-start bridge) |
 | `artemys/openclaw` | OpenClaw skill manifest |
 
@@ -138,12 +139,17 @@ Rotate keys anytime: `POST /v1/agents/{id}/rotate-key`
 ## CLI
 
 ```bash
+artemys start           # Initialize agent identity and register with Coffee Shop
+artemys whoami          # Show current agent identity and hub status
+artemys doctor          # Run diagnostics on agent setup
 artemys register        # Register an agent card with Coffee Shop
 artemys discover        # Query for compatible agents
 artemys rotate-key      # Rotate Coffee Shop API key
 artemys mcp-server      # Start the MCP bridge server
+artemys talent whoami   # Show candidate profile summary
 artemys talent search   # Search for matching opportunities
 artemys talent apply    # Submit an application
+artemys talent applications  # List submitted applications
 artemys talent status   # Check inbox messages
 artemys talent profile  # Update stored candidate profile
 artemys version         # Print CLI version
@@ -165,10 +171,13 @@ artemys mcp-server --agent-card ./agent-card.json --persist
 
 | Category | Tools |
 |----------|-------|
-| Discovery | `discover_agents` |
+| Identity | `get_identity` |
+| Profile | `get_profile` |
+| Discovery | `discover_agents`, `get_agent_card`, `register_agent` |
+| Protocol | `get_conversation_state`, `validate_message`, `list_conversations` |
+| Talent | `search_opportunities`, `express_interest`, `update_profile`, `get_my_applications` |
+| Resume | `parse_resume`, `resume_to_profile` |
 | Messaging | `check_inbox`, `respond_to_message` |
-| Protocol | `send_protocol_message`, `validate_message`, `list_conversations` |
-| Talent | `search_opportunities`, `express_interest`, `check_conversations`, `update_profile` |
 
 See [MCP Integration Guide](docs/mcp-integration.md) for setup with Claude Code, Cursor, and Windsurf.
 
@@ -186,21 +195,6 @@ See [OpenClaw Skill Guide](docs/openclaw-skill.md).
 
 <br>
 
-## Coffee Shop Service
-
-Self-host the Coffee Shop server for development or testing:
-
-```bash
-cd service
-bun install
-bun run migrate
-vercel dev
-```
-
-Production deployment uses Vercel serverless + Turso (LibSQL).
-
-<br>
-
 ## Development
 
 ```bash
@@ -216,7 +210,7 @@ bun run protocol:check  # Run protocol contract tests
 ## Ecosystem
 
 - [Artie](https://artie.app) — hosted candidate agent (for users without a personal AI)
-- [Orion](https://github.com/artemyshq/orion) — employer talent agent platform
+- [Orry](https://github.com/artemyshq/orry) — employer talent agent (Slack-first agentic ATS)
 
 <br>
 

package/dist/cli/config.d.ts

@@ -0,0 +1,21 @@
+import { z } from "zod";
+export declare const DEFAULT_COFFEESHOP_URL = "https://coffeeshop.artemys.ai";
+export declare const ArtemysConfigSchema: z.ZodObject<{
+    agent_id: z.ZodString;
+    api_key: z.ZodString;
+    coffeeshop_url: z.ZodOptional<z.ZodString>;
+    agent_card_path: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ArtemysConfig = z.infer<typeof ArtemysConfigSchema>;
+export declare function getConfigDir(): string;
+export declare function getConfigPath(): string;
+export declare function getDefaultAgentCardPath(): string;
+export declare function loadConfig(): ArtemysConfig | null;
+export declare function saveConfig(config: ArtemysConfig): void;
+export declare function saveAgentCard(card: Record<string, unknown>, path?: string): void;
+export type FlagMap = Record<string, string | string[] | boolean>;
+export declare function getFlagString(flags: FlagMap, key: string): string | undefined;
+export declare function resolveApiKey(config?: ArtemysConfig | null): string | undefined;
+export declare function resolveCoffeeShopUrl(flags: FlagMap, config?: ArtemysConfig | null): string;
+export declare function resolveAgentCardPath(flags: FlagMap, config?: ArtemysConfig | null): string | undefined;
+//# sourceMappingURL=config.d.ts.map

package/dist/cli/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/cli/config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,sBAAsB,kCAAkC,CAAA;AAErE,eAAO,MAAM,mBAAmB;;;;;iBAK9B,CAAA;AAEF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE/D,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAED,wBAAgB,UAAU,IAAI,aAAa,GAAG,IAAI,CASjD;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAKtD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAIhF;AAED,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,CAAA;AAEjE,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG7E;AAED,wBAAgB,aAAa,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAQ/E;AAeD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,GAC5B,MAAM,CAiBR;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,GAC5B,MAAM,GAAG,SAAS,CAiBpB"}

package/dist/cli/config.js

@@ -0,0 +1,97 @@
+import { chmodSync, mkdirSync, readFileSync, writeFileSync, existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { z } from "zod";
+export const DEFAULT_COFFEESHOP_URL = "https://coffeeshop.artemys.ai";
+export const ArtemysConfigSchema = z.object({
+    agent_id: z.string().min(1),
+    api_key: z.string().min(1),
+    coffeeshop_url: z.string().url().optional(),
+    agent_card_path: z.string().optional(),
+});
+export function getConfigDir() {
+    return join(homedir(), ".artemys");
+}
+export function getConfigPath() {
+    return join(getConfigDir(), "config.json");
+}
+export function getDefaultAgentCardPath() {
+    return join(getConfigDir(), "agent-card.json");
+}
+export function loadConfig() {
+    const configPath = getConfigPath();
+    try {
+        const raw = readFileSync(configPath, "utf-8");
+        const parsed = JSON.parse(raw);
+        return ArtemysConfigSchema.parse(parsed);
+    }
+    catch {
+        return null;
+    }
+}
+export function saveConfig(config) {
+    const configPath = getConfigPath();
+    mkdirSync(dirname(configPath), { recursive: true });
+    writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
+    chmodSync(configPath, 0o600);
+}
+export function saveAgentCard(card, path) {
+    const cardPath = path ?? getDefaultAgentCardPath();
+    mkdirSync(dirname(cardPath), { recursive: true });
+    writeFileSync(cardPath, JSON.stringify(card, null, 2) + "\n", "utf-8");
+}
+export function getFlagString(flags, key) {
+    const value = flags[key];
+    return typeof value === "string" ? value : undefined;
+}
+export function resolveApiKey(config) {
+    const envKey = process.env.ARTEMYS_COFFEESHOP_API_KEY;
+    if (typeof envKey === "string" && envKey.length > 0) {
+        return envKey;
+    }
+    const resolved = config !== undefined ? config : loadConfig();
+    return resolved?.api_key;
+}
+function validateCoffeeShopUrl(raw) {
+    const parsed = z.string().url().safeParse(raw);
+    if (!parsed.success) {
+        throw new Error(`Invalid --coffeeshop-url: not a valid URL`);
+    }
+    const url = new URL(parsed.data);
+    const isLocal = url.hostname === "localhost" || url.hostname === "127.0.0.1";
+    if (url.protocol !== "https:" && !(url.protocol === "http:" && isLocal)) {
+        throw new Error(`Invalid --coffeeshop-url: must use https (http allowed only for localhost)`);
+    }
+    return parsed.data;
+}
+export function resolveCoffeeShopUrl(flags, config) {
+    const flagValue = getFlagString(flags, "coffeeshop-url");
+    if (flagValue) {
+        return validateCoffeeShopUrl(flagValue);
+    }
+    const envValue = process.env.ARTEMYS_COFFEESHOP_URL;
+    if (typeof envValue === "string" && envValue.length > 0) {
+        return validateCoffeeShopUrl(envValue);
+    }
+    const resolved = config !== undefined ? config : loadConfig();
+    if (resolved?.coffeeshop_url) {
+        return validateCoffeeShopUrl(resolved.coffeeshop_url);
+    }
+    return DEFAULT_COFFEESHOP_URL;
+}
+export function resolveAgentCardPath(flags, config) {
+    const flagValue = getFlagString(flags, "agent-card");
+    if (flagValue) {
+        return flagValue;
+    }
+    const resolved = config !== undefined ? config : loadConfig();
+    if (resolved?.agent_card_path) {
+        return resolved.agent_card_path;
+    }
+    const defaultPath = getDefaultAgentCardPath();
+    if (existsSync(defaultPath)) {
+        return defaultPath;
+    }
+    return undefined;
+}
+//# sourceMappingURL=config.js.map

package/dist/cli/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/cli/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,CAAC,MAAM,sBAAsB,GAAG,+BAA+B,CAAA;AAErE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAA;AAIF,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,aAAa,CAAC,CAAA;AAC5C,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,iBAAiB,CAAC,CAAA;AAChD,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAA;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9B,OAAO,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAqB;IAC9C,MAAM,UAAU,GAAG,aAAa,EAAE,CAAA;IAClC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IAC1E,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;AAC9B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAA6B,EAAE,IAAa;IACxE,MAAM,QAAQ,GAAG,IAAI,IAAI,uBAAuB,EAAE,CAAA;IAClD,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACjD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;AACxE,CAAC;AAID,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,GAAW;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;IACxB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAA6B;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAA;IACrD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;IAC7D,OAAO,QAAQ,EAAE,OAAO,CAAA;AAC1B,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAChC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,CAAA;IAC5E,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAA;IAC/F,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAA;AACpB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAc,EACd,MAA6B;IAE7B,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAA;IACxD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,qBAAqB,CAAC,SAAS,CAAC,CAAA;IACzC,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAA;IACnD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,qBAAqB,CAAC,QAAQ,CAAC,CAAA;IACxC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;IAC7D,IAAI,QAAQ,EAAE,cAAc,EAAE,CAAC;QAC7B,OAAO,qBAAqB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;IACvD,CAAC;IAED,OAAO,sBAAsB,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAc,EACd,MAA6B;IAE7B,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;IACpD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;IAC7D,IAAI,QAAQ,EAAE,eAAe,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC,eAAe,CAAA;IACjC,CAAC;IAED,MAAM,WAAW,GAAG,uBAAuB,EAAE,CAAA;IAC7C,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/cli/index.d.ts

@@ -1,3 +1,8 @@
 #!/usr/bin/env node
+import { type FlagMap } from "./config.js";
+export type ParsedArgs = {
+    positionals: string[];
+    flags: FlagMap;
+};
 export declare function runCli(argv?: string[]): Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAsfA,wBAAsB,MAAM,CAAC,IAAI,WAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwCxE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAwBA,OAAO,EACL,KAAK,OAAO,EAQb,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,UAAU,GAAG;IACvB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,KAAK,EAAE,OAAO,CAAA;CACf,CAAA;AAwlBD,wBAAsB,MAAM,CAAC,IAAI,WAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4HxE"}