@llamaventures/cli 1.13.0 → 1.14.1

package/SECURITY.md

@@ -0,0 +1,62 @@
+# Security Policy
+
+## Reporting security issues
+
+**Do not file public GitHub issues for security bugs.** A public issue
+gives an attacker a head-start before we can patch.
+
+Instead, email [**gavin@llamaventures.vc**](mailto:gavin@llamaventures.vc)
+with:
+
+- A short description of the issue
+- Steps to reproduce
+- Expected vs. actual behavior
+- The CLI version (`npm ls -g @llamaventures/cli`)
+- Any other context that helps us reproduce
+
+We aim to acknowledge within ~5 push cycles (best effort), patch
+promptly, and credit the reporter (if desired) once the fix ships.
+We do not run a public bug bounty program.
+
+## Scope
+
+In scope:
+
+- Authentication / authorization bypass in the CLI client
+- Token handling vulnerabilities (logging, transmission, storage)
+- Supply-chain attacks against the npm package or its dependencies
+- Anything that lets an unauthorized party execute Llama Command
+  operations as another team member
+
+Out of scope (still report; lower urgency):
+
+- Bugs in third-party services we depend on (Google Cloud, npm,
+  Anthropic, etc.)
+- Issues only reproducible against a fork or a modified version of
+  this CLI
+
+Server-side bugs (`command.llamaventures.vc`) are governed separately;
+report through the same channel.
+
+## Supply-chain posture
+
+This package follows current best practice:
+
+- **`@llamaventures/cli` is published via npm
+  [Trusted Publishers](https://docs.npmjs.com/trusted-publishers)** —
+  no `NPM_TOKEN` is stored in CI secrets; the GitHub Action exchanges
+  an OIDC token at publish time.
+- **All releases ship with `--provenance`** (sigstore-signed). The
+  npm registry shows a "Provenance" badge on each version, traceable
+  to the exact commit + GitHub Action workflow that built it.
+- **Minimal dependency tree.** The CLI itself is zero-deps; the
+  bundled MCP server depends only on
+  `@modelcontextprotocol/sdk` (Anthropic-maintained, pinned exact).
+- **Branch protection** on `main` prevents force-push and deletion;
+  Dependabot, secret scanning, and push-protection are enabled.
+
+## Disclosure
+
+We coordinate disclosure when a fix lands. Once a patched version
+ships, we publish a security advisory on this repo and notify
+affected users via the team's internal channels.

package/assets/llama-ventures-logo.svg

@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 224 76.32">
+  <g>
+    <g>
+      <path d="M69.84,26.89h7.64v4.53h-13.48V7.33h5.84v19.56Z"/>
+      <path d="M86.13,7.33v24.04h-5.7V7.33h5.7Z"/>
+      <path d="M90.96,16.53c.74-1.5,1.76-2.65,3.04-3.45,1.28-.81,2.72-1.21,4.3-1.21,1.35,0,2.54.28,3.56.83s1.81,1.28,2.36,2.17v-2.73h5.88v19.26h-5.88v-2.73c-.57.9-1.37,1.62-2.39,2.17-1.02.55-2.21.83-3.56.83-1.56,0-2.98-.41-4.27-1.22-1.29-.82-2.3-1.98-3.04-3.49-.75-1.51-1.12-3.25-1.12-5.23s.37-3.72,1.12-5.21ZM103,18.29c-.81-.85-1.81-1.28-2.97-1.28s-2.16.42-2.98,1.26c-.81.84-1.22,2-1.22,3.47s.41,2.64,1.22,3.51c.81.86,1.81,1.29,2.98,1.29s2.16-.42,2.97-1.28c.81-.85,1.22-2.01,1.22-3.49s-.41-2.64-1.22-3.49Z"/>
+      <path d="M143.78,14.24c1.4,1.44,2.1,3.44,2.1,6v11.18h-5.82v-10.39c0-1.24-.32-2.19-.97-2.86-.65-.68-1.54-1.01-2.68-1.01s-2.04.34-2.68,1.01c-.65.67-.97,1.63-.97,2.86v10.39h-5.82v-10.39c0-1.24-.32-2.19-.97-2.86-.65-.68-1.54-1.01-2.68-1.01s-2.03.34-2.68,1.01c-.65.67-.98,1.63-.98,2.86v10.39h-5.85V12.28h5.85v2.4c.59-.8,1.37-1.43,2.33-1.9.96-.47,2.04-.7,3.25-.7,1.44,0,2.72.31,3.85.92,1.13.62,2.01,1.5,2.65,2.64.66-1.05,1.56-1.91,2.7-2.57,1.14-.66,2.38-.99,3.72-.99,2.37,0,4.26.72,5.66,2.16Z"/>
+      <path d="M149.87,16.6c.74-1.49,1.75-2.63,3.03-3.44s2.71-1.2,4.28-1.2c1.35,0,2.53.27,3.55.82,1.01.55,1.8,1.27,2.34,2.16v-2.72h5.86v19.17h-5.86v-2.72c-.57.89-1.36,1.62-2.38,2.16-1.01.55-2.2.82-3.54.82-1.56,0-2.97-.41-4.25-1.22s-2.29-1.97-3.03-3.47c-.74-1.5-1.11-3.24-1.11-5.21s.37-3.7,1.11-5.19ZM161.86,18.36c-.81-.85-1.8-1.27-2.96-1.27s-2.15.42-2.96,1.25c-.81.84-1.22,1.99-1.22,3.45s.41,2.63,1.22,3.49c.81.86,1.8,1.29,2.96,1.29s2.15-.42,2.96-1.27,1.22-2,1.22-3.47-.4-2.62-1.22-3.47Z"/>
+    </g>
+    <g>
+      <path d="M88.31,42.57l-8.62,24.05-7.19-.14-8.5-23.91h6.3l5.57,17.41,6.27-17.41h6.17Z"/>
+      <path d="M106.78,57.98l-13.12.07c.09,1.16.46,2.04,1.12,2.65.66.61,1.46.92,2.42.92,1.42,0,2.41-.6,2.97-1.8h6.17c-.31,1.21-.86,2.45-1.67,3.42-.81.98-1.87,1.77-3.09,2.33s-2.73.9-4.24.9c-1.82,0-3.79-.59-5.21-1.37-1.42-.78-2.42-2.01-3.22-3.45-.8-1.44-1.2-3.11-1.2-5.04s.58-4,1.37-5.45c.79-1.45,2.09-2.48,3.51-3.26,1.42-.78,3.21-1.15,5.06-1.15s3.43.55,4.83,1.31c1.4.75,2.56,2.1,3.35,3.5s1.07,2.89,1.07,4.76c0,.53-.03,1.09-.1,1.67ZM100.83,54.89c0-.98-.33-1.76-1-2.33-.67-.58-1.5-.87-2.5-.87s-1.76.28-2.42.84c-.66.56-1.06,1.34-1.22,2.37h7.13Z"/>
+      <path d="M126.7,49.22c1.3,1.41,2.3,3.49,2.3,5.96v11.44h-5.78s-.04-10.69-.04-10.69c0-1.25-.49-2.07-1.13-2.76-.65-.69-1.54-1.06-2.81-1-1.09.05-1.89.57-2.54,1.26s-.91,1.61-.91,2.86v10.32h-5.79v-19.13h5.79v2.47c.58-.82,1.17-1.47,2.15-1.95.98-.48,2.08-.72,3.3-.72,2.18,0,4.17.53,5.47,1.94Z"/>
+      <path d="M143.61,61.6v5.02h-2.9c-2.06,0-4.1-.8-5.25-1.81-1.16-1.01-1.43-3.02-1.43-5.31v-7.1s-2.39,0-2.39,0v-4.91h2.39v-4.66s5.79,0,5.79,0v4.66h3.79v4.91h-3.78v7.2c0,.56.15,1.41.41,1.65.27.24.71.37,1.33.37h2.03Z"/>
+      <path d="M165.77,47.34v19.01h-5.79l-.03-2.74c-.58.82-1.77,1.75-2.76,2.25-.99.5-2.08.75-3.28.75-1.42,0-2.68-.32-3.77-.95-1.09-.63-1.88-2.02-2.48-3.21-.6-1.2-.9-2.61-.9-4.24v-10.87h5.67v10.1c0,1.24.32,2.21.97,2.9.64.69,1.51,1.03,2.6,1.03s1.99-.34,2.63-1.03c.64-.69.97-1.66.97-2.9v-10.1h6.17Z"/>
+      <path d="M178.26,48.17c1-.59,2.41-.82,3.64-.82v6.17h-1.85c-1.42,0-2.38.33-3.09.94-.71.61-1.11,1.55-1.11,3.09v9.06h-5.79v-19.13h5.7v3.1c.67-1.02,1.5-1.83,2.5-2.42Z"/>
+      <path d="M202.59,58.03h-13.25c.09,1.19.47,2.09,1.15,2.71.67.63,1.5.94,2.48.94,1.46,0,2.47-.61,3.05-1.84h6.23c-.32,1.25-.9,2.38-1.73,3.38-.83,1-1.88,1.79-3.13,2.36-1.26.57-2.66.85-4.21.85-1.87,0-3.54-.4-5-1.19-1.46-.79-2.6-1.93-3.42-3.41-.82-1.48-1.23-3.21-1.23-5.19s.4-3.71,1.21-5.19c.81-1.48,1.95-2.62,3.41-3.41,1.46-.8,3.14-1.19,5.03-1.19s3.49.39,4.93,1.16c1.44.77,2.56,1.88,3.37,3.31s1.21,3.11,1.21,5.02c0,.55-.03,1.12-.1,1.71ZM196.7,54.79c0-1-.34-1.8-1.03-2.39-.68-.59-1.54-.89-2.57-.89s-1.81.29-2.48.86c-.67.57-1.09,1.37-1.25,2.42h7.33Z"/>
+      <path d="M106.77,58.03h-13.25c.09,1.19.47,2.09,1.15,2.71.67.63,1.5.94,2.48.94,1.46,0,2.47-.61,3.05-1.84h6.23c-.32,1.25-.9,2.38-1.73,3.38-.83,1-1.88,1.79-3.13,2.36-1.26.57-2.66.85-4.21.85-1.87,0-3.54-.4-5-1.19-1.46-.79-2.6-1.93-3.42-3.41-.82-1.48-1.23-3.21-1.23-5.19s.4-3.71,1.21-5.19c.81-1.48,1.95-2.62,3.41-3.41,1.46-.8,3.14-1.19,5.03-1.19s3.49.39,4.93,1.16c1.44.77,2.56,1.88,3.37,3.31s1.21,3.11,1.21,5.02c0,.55-.03,1.12-.1,1.71ZM100.88,54.79c0-1-.34-1.8-1.03-2.39-.68-.59-1.54-.89-2.57-.89s-1.81.29-2.48.86c-.67.57-1.09,1.37-1.25,2.42h7.33Z"/>
+      <path d="M209.1,65.57c-1.28-.57-2.29-1.35-3.03-2.35-.74-.99-1.15-2.11-1.24-3.34h5.68c.07.66.37,1.2.91,1.61.54.41,1.2.62,1.98.62.72,0,1.27-.14,1.66-.43.39-.28.59-.66.59-1.11,0-.55-.28-.95-.84-1.22-.56-.26-1.47-.56-2.72-.88-1.34-.32-2.47-.66-3.36-1.01-.9-.35-1.67-.92-2.32-1.68-.65-.76-.98-1.8-.98-3.1,0-1.1.3-2.1.89-3,.59-.9,1.47-1.62,2.62-2.14,1.15-.53,2.53-.79,4.12-.79,2.35,0,4.21.59,5.56,1.78,1.36,1.19,2.14,2.77,2.34,4.73h-5.31c-.09-.66-.37-1.19-.86-1.58-.48-.39-1.12-.58-1.9-.58-.67,0-1.19.13-1.55.39s-.54.62-.54,1.08c0,.55.29.96.86,1.23.57.28,1.46.55,2.67.82,1.39.37,2.52.73,3.4,1.08.87.35,1.64.93,2.3,1.72.66.79,1,1.84,1.02,3.17,0,1.12-.31,2.12-.92,3-.62.88-1.5,1.57-2.65,2.07-1.15.5-2.5.75-4.02.75-1.64,0-3.09-.28-4.37-.86Z"/>
+    </g>
+  </g>
+  <path d="M48.7,50.5c3.49.32,6.76,2.94,8.15,6.08,3.09,6.98-1.33,14.02-8.65,15.07-9.08-.47-18.69.74-27.71.12-6.65-.46-10.81-5.53-10.25-12.13l6.28-25.63c-2.05-.02-4.19-.55-6.11-1.26-2.04-.75-4.19-1.79-5.33-3.74-3.04-5.19,1.25-9.8,5.21-12.75-1.81-4.39,2.75-6.87,6.59-6.06.9-3.1,4.51-4.16,7.01-2.12.61.5,1.37,2.23,2.32,1.05.83-1.03,1.11-3.35,1.02-4.64-.06-.81-.79-2.28.57-2.34.91-.04,2.41,1.95,2.85,2.69,1.48,2.49,1.77,5.72.61,8.39,2.83-.4,5.16-1.93,6.73-4.29.48-.72.81-2.17,1.87-1.85.59.18.96,2.01,1.06,2.59.65,3.9-1.25,7.48-4.51,9.55.65,2.66,1.28,5.32,1.63,8.05.99,7.74.41,15.67-1.62,23.2h12.28v.02ZM26.67,18.33c-4.94-4.2-11.7-1.55-15.83,2.4-.27.26-1.14,1.11-1.26,1.39-.09.21.08.17.16.21.66.39,1.73.61,2.01,1.39.47,1.33-.45,2.61-1.85,2.49-.42-.04-1.91-.89-2.08-.76.18,1.93,1.71,2.95,3.37,3.62,3.11,1.24,6.67,1.29,9.98,1.09l.26.14-3.65,14.92c10.85-2.11,18.01-19.14,8.89-26.88h0Z"/>
+  <path d="M23.15,21.22c1.95,1.35-.13,4.72-2.34,3.28s-.04-4.95,2.34-3.28Z"/>
+</svg>

package/bin/llama-mcp.mjs

@@ -11,7 +11,7 @@ import { createRequire } from "module";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
-import { getAuthHeaders, readBriefing, request } from "../lib/client.mjs";
+import { getAuthHeaders, readBriefing, request, requestSse } from "../lib/client.mjs";
 
 const requireFromHere = createRequire(import.meta.url);
 const { version: PKG_VERSION } = requireFromHere("../package.json");
@@ -40,6 +40,96 @@ async function callApi(method, path, body) {
   }
 }
 
+function textResult(text, isError = false) {
+  return {
+    content: [{ type: "text", text }],
+    ...(isError ? { isError: true } : {}),
+  };
+}
+
+function splitSources(value) {
+  if (Array.isArray(value)) return value.filter(Boolean);
+  if (!value || value === true) return undefined;
+  return String(value)
+    .split(",")
+    .map((s) => s.trim())
+    .filter(Boolean);
+}
+
+function buildEnrichmentAgentMessage(args = {}) {
+  if (args.message) return String(args.message);
+  const sources = splitSources(args.sources) ?? [
+    "website",
+    "github",
+    "linkedin",
+    "yc",
+    "launch",
+    "web",
+    "monid",
+  ];
+  const budget = args.budgetCents ?? "50";
+  const memo = args.generateMemo
+    ? "Generate memo only after enrichment because the caller explicitly requested it."
+    : "Do not generate memo.";
+  return [
+    "Run server-side deal enrichment for this deal.",
+    `Use sources: ${sources.join(", ")}.`,
+    `Private Monid budget cap: ${budget} cents.`,
+    "Read the enrichment harness first, then collect current company/founder evidence.",
+    "Write canonical evidence links, sourced deal facts, stable deal fields, and typed factual values where supported.",
+    "For typed factual values, call read_typed_factual_layer first and use upsert_typed_fact for queryable fields.",
+    "Search snippets alone are not high-confidence evidence; fetch direct sources where possible.",
+    memo,
+    "End with what was written, what was skipped, and open questions.",
+  ].join(" ");
+}
+
+function summarizeAgentEvents(events = []) {
+  return events
+    .flatMap((event) => {
+      if (event.tool_use?.name) return [{ type: "tool_use", name: event.tool_use.name }];
+      if (event.tool_result?.name) {
+        return [
+          {
+            type: "tool_result",
+            name: event.tool_result.name,
+            ok: event.tool_result.ok ?? null,
+            summary: event.tool_result.summary ?? null,
+          },
+        ];
+      }
+      if (event.error) return [{ type: "error", error: String(event.error) }];
+      return [];
+    })
+    .slice(-80);
+}
+
+async function runDealAgentTool({ dealId, message, title = "MCP agent run" }) {
+  try {
+    const thread = await request("POST", `/api/deals/${encodeURIComponent(dealId)}/threads`, { title });
+    if (!thread?.id) throw new Error("Thread creation did not return an id");
+    const result = await requestSse(
+      "POST",
+      `/api/deals/${encodeURIComponent(dealId)}/threads/${encodeURIComponent(thread.id)}`,
+      { message },
+    );
+    return textResult(
+      JSON.stringify(
+        {
+          ok: true,
+          threadId: thread.id,
+          text: result.text,
+          toolEvents: summarizeAgentEvents(result.events),
+        },
+        null,
+        2,
+      ),
+    );
+  } catch (err) {
+    return textResult(`Error: ${err?.message ?? String(err)}`, true);
+  }
+}
+
 // Append a block to a deal brief. The /blocks route only accepts atomic
 // full-array PUTs (no POST), so we GET current blocks, prepend the new
 // one (matches UI default since 2026-05-03), and PUT the merged array.
@@ -786,6 +876,88 @@ server.registerTool(
     callApi("POST", `/api/deals/${encodeURIComponent(dealId)}/refresh-persona`, { persona })
 );
 
+server.registerTool(
+  "deal_agent_run",
+  {
+    description:
+      "Run Llama Command's server-side Deal Agent inside a deal thread. " +
+      "Use this when the user explicitly wants the service agent to execute " +
+      "a deal-scoped task instead of the local MCP client doing the work.",
+    inputSchema: {
+      dealId: z.string().describe("deal uuid"),
+      message: z.string().describe("task instruction for the server-side Deal Agent"),
+      title: z.string().optional().describe("optional thread title; defaults to MCP agent run"),
+    },
+  },
+  async ({ dealId, message, title }) =>
+    runDealAgentTool({ dealId, message, title: title || "MCP agent run" })
+);
+
+server.registerTool(
+  "deal_enrich",
+  {
+    description:
+      "Run the Llama Command deal enrichment planner/trigger for one deal. " +
+      "Default is dry-run: returns evidence plan, source plan, Monid budget/config " +
+      "status, and planned writes without changing facts/links/memo. With " +
+      "apply=true and executor=server_agent, this starts the server-side Deal " +
+      "Agent unless harnessOnly=true. Set apply=true only when the user " +
+      "explicitly wants the enrichment run recorded/applied. " +
+      "generateMemo never defaults on; pass true only when the user explicitly asks " +
+      "for Memo generation after enrichment.",
+    inputSchema: {
+      dealId: z.string().describe("deal uuid"),
+      dryRun: z.boolean().optional().describe("default true unless apply=true"),
+      apply: z.boolean().optional().describe("record/apply the enrichment intent server-side"),
+      executor: z
+        .enum(["server_agent", "external_agent", "planner"])
+        .optional()
+        .describe("who will execute the harness; server_agent starts Deal Agent when apply=true"),
+      sources: z
+        .array(z.enum(["website", "github", "linkedin", "yc", "launch", "web", "monid"]))
+        .optional()
+        .describe("source families to use; defaults to the standard enrichment set"),
+      budgetCents: z
+        .number()
+        .int()
+        .min(0)
+        .max(500)
+        .optional()
+        .describe("Monid spend cap for this run, in cents; default is 50 when Monid is requested"),
+      generateMemo: z
+        .boolean()
+        .optional()
+        .describe("explicitly request memo regeneration after enrichment; default false"),
+      harnessOnly: z
+        .boolean()
+        .optional()
+        .describe("when true, return/apply the enrichment harness endpoint instead of starting Deal Agent"),
+      message: z
+        .string()
+        .optional()
+        .describe("optional override instruction for the server-side Deal Agent"),
+    },
+  },
+  async ({ dealId, dryRun, apply, executor, sources, budgetCents, generateMemo, harnessOnly, message }) => {
+    const effectiveExecutor = executor ?? "server_agent";
+    if (apply === true && effectiveExecutor === "server_agent" && harnessOnly !== true) {
+      return runDealAgentTool({
+        dealId,
+        title: "MCP enrichment",
+        message: buildEnrichmentAgentMessage({ sources, budgetCents, generateMemo, message }),
+      });
+    }
+    return callApi("POST", `/api/deals/${encodeURIComponent(dealId)}/enrich`, {
+      dryRun,
+      apply,
+      executor: effectiveExecutor,
+      sources,
+      budgetCents,
+      generateMemo,
+    });
+  }
+);
+
 // ============================================================
 // External pitch (founder intake) — no Llama Command token required
 // ============================================================

package/bin/llama.mjs

@@ -15,6 +15,7 @@ import {
   readCanonicalToken,
   readLegacyConfig,
   request,
+  requestSse,
   tryGcloudIdentityToken,
   writeCanonicalToken,
   writeLegacyConfig,
@@ -199,6 +200,75 @@ async function searchDeals(q, flags) {
   return result;
 }
 
+function splitCsvFlag(value) {
+  if (!value || value === true) return undefined;
+  return String(value)
+    .split(",")
+    .map((s) => s.trim())
+    .filter(Boolean);
+}
+
+function boolFlag(flags, ...names) {
+  return names.some((name) => flags[name] === true || flags[name] === "true" || flags[name] === "1");
+}
+
+function buildEnrichmentAgentMessage(flags) {
+  if (flags.message && flags.message !== true) return String(flags.message);
+  const sources = splitCsvFlag(flags.sources) ?? [
+    "website",
+    "github",
+    "linkedin",
+    "yc",
+    "launch",
+    "web",
+    "monid",
+  ];
+  const budget = flags["budget-cents"] || flags.budgetCents || "50";
+  const memo = boolFlag(flags, "memo", "generate-memo", "generateMemo")
+    ? "Generate memo only after enrichment because the caller explicitly requested it."
+    : "Do not generate memo.";
+  return [
+    "Run server-side deal enrichment for this deal.",
+    `Use sources: ${sources.join(", ")}.`,
+    `Private Monid budget cap: ${budget} cents.`,
+    "Read the enrichment harness first, then collect current company/founder evidence.",
+    "Write canonical evidence links, sourced deal facts, stable deal fields, and typed factual values where supported.",
+    "For typed factual values, call read_typed_factual_layer first and use upsert_typed_fact for queryable fields.",
+    "Search snippets alone are not high-confidence evidence; fetch direct sources where possible.",
+    memo,
+    "End with what was written, what was skipped, and open questions.",
+  ].join(" ");
+}
+
+async function runDealAgentViaThread(dealId, message, title = "CLI agent run") {
+  const thread = await request("POST", `/api/deals/${encodeURIComponent(dealId)}/threads`, { title });
+  if (!thread?.id) throw new Error("Thread creation did not return an id");
+  process.stderr.write(`Running Deal Agent in thread ${thread.id}\n`);
+  const result = await requestSse(
+    "POST",
+    `/api/deals/${encodeURIComponent(dealId)}/threads/${encodeURIComponent(thread.id)}`,
+    { message },
+    {
+      onEvent(event) {
+        if (event.tool_use?.name) {
+          process.stderr.write(`[tool] ${event.tool_use.name}\n`);
+        }
+        if (event.tool_result?.name) {
+          const status = event.tool_result.ok ? "ok" : "error";
+          process.stderr.write(
+            `[tool] ${event.tool_result.name}: ${status} — ${event.tool_result.summary ?? ""}\n`,
+          );
+        }
+        if (event.text) {
+          process.stdout.write(event.text);
+        }
+      },
+    },
+  );
+  if (result.text && !result.text.endsWith("\n")) process.stdout.write("\n");
+  return { thread, ...result };
+}
+
 const HELP_FULL = `Llama Command CLI
 
 Agent onboarding (run once on first install):
@@ -235,6 +305,11 @@ Deals:
             llama deal update <dealId> sector "Developer Tools"
             llama deal update <dealId> foundedYear 2024
             llama deal update <dealId> leadInvestor "Acme Capital"
+  llama deal enrich <dealId> [--dry-run] [--apply] [--executor server_agent|external_agent|planner]
+                            [--sources website,github,linkedin,yc,monid] [--budget-cents 50]
+                            [--memo] [--prompt] [--harness-only]
+      dry-run returns the harness; --apply --executor server_agent runs the server Deal Agent.
+  llama deal agent run <dealId> --message "collect founder evidence and update typed facts"
   llama deal extra set <dealId> <key> <value>        # system-admin only
       Patch one top-level key in deals.extra JSONB. Value is parsed as
       JSON when possible ('{"a":1}', 'true', '3'), else stored as a
@@ -439,7 +514,7 @@ Common:
   llama agent-onboard               print the AI-agent workflow contract
 
 Command groups — run \`llama help <group>\` for that group's commands:
-  deal        create · show · feed · update · search · collaborators · links · delete
+  deal        create · show · feed · update · enrich · search · collaborators · links · delete
   brief       brief blocks: list · add · edit · history · refresh
   facts       deal facts + skill corrections (the sourced, trust-rated layer)
   timeline    timeline · posts · mentions
@@ -1157,6 +1232,79 @@ https://command.llamaventures.vc/settings/tokens, run
     return;
   }
 
+  if (area === "deal" && action === "agent") {
+    const sub = rest[0];
+    const dealId = rest[1];
+    const { flags, positional } = parseFlags(rest.slice(2), ["message"]);
+    const message =
+      flags.message && flags.message !== true ? String(flags.message) : positional.join(" ").trim();
+    if (sub !== "run" || !dealId || !message) {
+      throw new Error(`Usage: llama deal agent run <dealId> --message "what the server agent should do"`);
+    }
+    await runDealAgentViaThread(dealId, message, "CLI agent run");
+    return;
+  }
+
+  // ----- Deal enrichment: evidence plan + server-side enrichment trigger -----
+  // The server owns Monid credentials and all write/audit behavior. CLI only
+  // passes intent; default is dry-run so agents can inspect the harness before
+  // creating facts/links or touching memo state.
+  if (area === "deal" && action === "enrich") {
+    const dealId = rest[0];
+    if (!dealId) {
+      throw new Error(
+        "Usage: llama deal enrich <dealId> [--dry-run] [--apply] " +
+        "[--executor server_agent|external_agent|planner] " +
+        "[--sources website,github,linkedin,yc,monid] [--budget-cents 50] [--memo] [--prompt]"
+      );
+    }
+    const { flags } = parseFlags(rest.slice(1), [
+      "dry-run",
+      "apply",
+      "executor",
+      "sources",
+      "budget-cents",
+      "memo",
+      "generate-memo",
+      "generateMemo",
+      "prompt",
+      "handoff",
+      "harness-only",
+      "message",
+    ]);
+    const sources = splitCsvFlag(flags.sources);
+    const budgetCents =
+      flags["budget-cents"] !== undefined && flags["budget-cents"] !== true
+        ? Number(flags["budget-cents"])
+        : undefined;
+    const apply = boolFlag(flags, "apply");
+    const executor = flags.executor && flags.executor !== true ? String(flags.executor) : "server_agent";
+
+    if (apply && executor === "server_agent" && !boolFlag(flags, "harness-only")) {
+      await runDealAgentViaThread(dealId, buildEnrichmentAgentMessage(flags), "CLI enrichment");
+      return;
+    }
+
+    const result = await request(
+      "POST",
+      `/api/deals/${encodeURIComponent(dealId)}/enrich`,
+      {
+        dryRun: apply ? false : true,
+        apply,
+        executor,
+        sources,
+        budgetCents,
+        generateMemo: boolFlag(flags, "memo", "generate-memo", "generateMemo"),
+      }
+    );
+    if (flags.prompt === true || flags.handoff === true) {
+      print(result?.agentHarness?.handoffPrompt || result?.agentHarness?.systemInjection || "");
+    } else {
+      print(result);
+    }
+    return;
+  }
+
   // ----- Collaborators (deal team — non-owner contributors) -----
   // Accepts --user as numeric id OR @llamaventures.vc email; emails are
   // resolved to id via /api/users so the CLI matches how the web picker

package/lib/client.mjs

@@ -220,6 +220,10 @@ export async function request(method, endpoint, body) {
   return requestWithRetry(method, endpoint, body, /* allowRetry */ true);
 }
 
+export async function requestSse(method, endpoint, body, opts = {}) {
+  return requestSseWithRetry(method, endpoint, body, opts, /* allowRetry */ true);
+}
+
 async function requestWithRetry(method, endpoint, body, allowRetry) {
   const authHeaders = await getAuthHeaders();
   if (Object.keys(authHeaders).length === 0) throw noAuthError();
@@ -268,6 +272,80 @@ async function requestWithRetry(method, endpoint, body, allowRetry) {
   return data;
 }
 
+async function requestSseWithRetry(method, endpoint, body, opts, allowRetry) {
+  const authHeaders = await getAuthHeaders();
+  if (Object.keys(authHeaders).length === 0) throw noAuthError();
+  const res = await fetch(`${getBaseUrl()}${endpoint}`, {
+    method,
+    headers: {
+      "Content-Type": "application/json",
+      ...authHeaders,
+    },
+    body: body === undefined ? undefined : JSON.stringify(body),
+  });
+
+  if (res.status === 401 && allowRetry && (await bearerCameFromOAuth())) {
+    let refreshed = null;
+    try {
+      const { forceRefresh } = await import("./oauth-refresh.mjs");
+      refreshed = await forceRefresh();
+    } catch {
+      refreshed = null;
+    }
+    if (refreshed) {
+      return requestSseWithRetry(method, endpoint, body, opts, /* allowRetry */ false);
+    }
+    throw unauthorizedError();
+  }
+
+  if (res.status === 401) throw unauthorizedError();
+
+  if (!res.ok) {
+    const text = await res.text();
+    let data;
+    try {
+      data = text ? JSON.parse(text) : null;
+    } catch {
+      data = text;
+    }
+    const message = typeof data === "object" && data?.error ? data.error : `HTTP ${res.status}`;
+    throw new Error(message);
+  }
+
+  const reader = res.body?.getReader();
+  const decoder = new TextDecoder();
+  const events = [];
+  let text = "";
+  let buf = "";
+  if (!reader) return { text, events };
+
+  const handleFrame = (frame) => {
+    const dataLine = frame.split("\n").find((line) => line.startsWith("data: "));
+    if (!dataLine) return;
+    let event;
+    try {
+      event = JSON.parse(dataLine.slice(6));
+    } catch {
+      return;
+    }
+    events.push(event);
+    opts.onEvent?.(event);
+    if (event.text) text += event.text;
+    if (event.error) throw new Error(String(event.error));
+  };
+
+  while (true) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    buf += decoder.decode(value, { stream: true });
+    const frames = buf.split("\n\n");
+    buf = frames.pop() || "";
+    for (const frame of frames) handleFrame(frame);
+  }
+  if (buf.trim()) handleFrame(buf);
+  return { text, events };
+}
+
 export function print(data) {
   if (typeof data === "string") {
     console.log(data);

package/package.json

@@ -1,17 +1,27 @@
 {
   "name": "@llamaventures/cli",
-  "version": "1.13.0",
+  "version": "1.14.1",
   "description": "CLI + MCP server for the Llama Ventures investment workbench (command.llamaventures.vc).",
   "type": "module",
+  "scripts": {
+    "test": "npm run test:agent-routing",
+    "test:agent-routing": "node scripts/verify-agent-routing.mjs"
+  },
   "bin": {
     "llama": "bin/llama.mjs",
     "llama-mcp": "bin/llama-mcp.mjs"
   },
   "files": [
+    "assets/",
     "bin/",
     "lib/",
+    "scripts/verify-agent-routing.mjs",
     "AGENT_BRIEFING.md",
+    "CHANGELOG.md",
+    "CONTRIBUTING.md",
     "README.md",
+    "README.zh-CN.md",
+    "SECURITY.md",
     "LICENSE"
   ],
   "engines": {