totemlayer 0.1.3 → 0.1.5

package/bin/sdk/request-options.js

@@ -0,0 +1,36 @@
+import { TotemError } from "./errors.js";
+export function requireActionChecksKey(apiKey) {
+    if (typeof apiKey !== "string" || !/^at_(?:test|live)_[A-Za-z0-9_-]{43}$/.test(apiKey)) {
+        throw new TotemError("A separate scoped Action Checks API key (at_test_ or at_live_) is required; Network credentials cannot authorize actions.", { code: "INVALID_CONFIG" });
+    }
+    return apiKey;
+}
+export function assistantCheckOptions(options) {
+    const { actionChecksApiKey, ...requestOptions } = options ?? {};
+    return {
+        ...signalOnlyOptions(requestOptions),
+        headers: { "X-Totem-Action-Key": requireActionChecksKey(actionChecksApiKey) },
+    };
+}
+export function assertInputFields(input, allowed) {
+    if (!input ||
+        typeof input !== "object" ||
+        Array.isArray(input) ||
+        Object.keys(input).some((key) => !allowed.includes(key))) {
+        throw new TotemError("The request contains unsupported fields; caller identity comes from credentials.", {
+            code: "INVALID_INPUT",
+        });
+    }
+}
+/** These APIs derive caller identity from credentials, never from caller options. */
+export function signalOnlyOptions(options = {}) {
+    if (!options ||
+        typeof options !== "object" ||
+        Array.isArray(options) ||
+        Object.keys(options).some((key) => key !== "signal")) {
+        throw new TotemError("Only an abort signal may be supplied as request options.", {
+            code: "INVALID_REQUEST_OPTIONS",
+        });
+    }
+    return { signal: options.signal };
+}

package/bin/sdk/transport.js

@@ -25,7 +25,8 @@ export class Transport {
     #timeoutMs;
     #maxRetries;
     #retryDelayMs;
-    constructor(options) {
+    #responseEnvelope;
+    constructor(options, api = undefined) {
         if (!options.apiKey?.trim())
             throw new TotemError("An agent API key is required.", { code: "INVALID_CONFIG" });
         const url = new URL(options.baseUrl ?? "https://totemlayer.com");
@@ -41,7 +42,8 @@ export class Transport {
             });
         }
         this.#apiKey = options.apiKey;
-        this.#baseUrl = `${url.origin}/api/v1/network`;
+        this.#baseUrl = `${url.origin}${api?.basePath ?? "/api/v1/network"}`;
+        this.#responseEnvelope = api?.responseEnvelope ?? "data";
         this.#fetch = options.fetch ?? globalThis.fetch.bind(globalThis);
         this.#timeoutMs = options.timeoutMs ?? 15_000;
         this.#maxRetries = options.maxRetries ?? 2;
@@ -117,7 +119,10 @@ export class Transport {
                     }
                     if (!result.ok)
                         throw apiError(result.status, payload, requestId);
-                    if (!payload || typeof payload !== "object" || !("data" in payload)) {
+                    if (!payload ||
+                        typeof payload !== "object" ||
+                        Array.isArray(payload) ||
+                        (this.#responseEnvelope === "data" && !("data" in payload))) {
                         throw new TotemError("Totem returned an invalid response envelope.", {
                             code: "INVALID_RESPONSE",
                             requestId,

package/bin/totem.mjs

@@ -4,7 +4,7 @@ import { createHash, randomUUID } from "node:crypto";
 import { createReadStream } from "node:fs";
 import { stripVTControlCharacters } from "node:util";
 
-const CLI_VERSION = "0.1.3";
+const CLI_VERSION = "0.1.5";
 const DEFAULT_BASE_URL = "https://totemlayer.com";
 const API_KEY_PATTERN = /^at_(?:live|test)_[A-Za-z0-9_-]{20,}$/;
 const ACTION_PATTERN = /^[a-z0-9][a-z0-9._:-]*$/;
@@ -241,9 +241,16 @@ function help() {
   Confirm installation totem --version
   Run one-off           npx --yes totemlayer --help
 
+Connect once and receive Mission work (local preview)
+  Requires the matching local package; not yet published to npm.
+  totem setup
+  totem status
+  totem start --background
+  totem stop
+
 Agent messaging and local runtime
   totem network --help
-  totem network run --provider ollama --model qwen3.5:9b
+  totem network run --provider qwen-local --model qwen3.5-9b
 
 Connect an AI app through MCP
   totem mcp
@@ -1741,6 +1748,20 @@ async function runRfq(options, baseUrl) {
 }
 
 async function main() {
+  if (["setup", "status", "doctor"].includes(process.argv[2])) {
+    const { agentSetupMain, agentStatusMain } = await import("./agent-setup.mjs");
+    const { readAgentRuntimeStatus } = await import("./agent-runner.mjs");
+    const command = process.argv[2] === "setup" ? agentSetupMain : agentStatusMain;
+    process.exitCode = await command(process.argv.slice(3), {
+      readRuntimeStatus: readAgentRuntimeStatus,
+    });
+    return;
+  }
+  if (["start", "stop"].includes(process.argv[2])) {
+    const { agentRunnerMain } = await import("./agent-runner.mjs");
+    process.exitCode = await agentRunnerMain(process.argv[2], process.argv.slice(3));
+    return;
+  }
   if (process.argv[2] === "mcp") {
     if (process.argv[3] === "install" || process.argv[3] === "--help" || process.argv[3] === "-h") {
       const { installTotemMcp } = await import("./mcp-install.mjs");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "totemlayer",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Cross-platform CLI for TotemLayer agent identity and authorization",
   "type": "module",
   "bin": {