@llamaventures/cli 1.18.1 → 1.20.0

package/contracts/required-operations.json

@@ -0,0 +1,342 @@
+{
+  "format": "llama.cli-core-api-operations.v1",
+  "coreApiContract": "contracts/core-api.json",
+  "requiredOperations": [
+    {
+      "method": "GET",
+      "path": "/api/admin/agent-events"
+    },
+    {
+      "method": "GET",
+      "path": "/api/admin/auth-events"
+    },
+    {
+      "method": "GET",
+      "path": "/api/admin/deal-events"
+    },
+    {
+      "method": "GET",
+      "path": "/api/agent/activity"
+    },
+    {
+      "method": "GET",
+      "path": "/api/agent/briefing"
+    },
+    {
+      "method": "POST",
+      "path": "/api/agent/client-events"
+    },
+    {
+      "method": "GET",
+      "path": "/api/agent/explain"
+    },
+    {
+      "method": "GET",
+      "path": "/api/agent/manifest"
+    },
+    {
+      "method": "GET",
+      "path": "/api/agent/preferences"
+    },
+    {
+      "method": "POST",
+      "path": "/api/agent/preferences"
+    },
+    {
+      "method": "PATCH",
+      "path": "/api/agent/preferences/{id}"
+    },
+    {
+      "method": "GET",
+      "path": "/api/agent/skills"
+    },
+    {
+      "method": "GET",
+      "path": "/api/agent/skills/{slug}"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/create"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/deleted"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/update"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/deals/{dealId}"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/agent-runs/{runId}/revert"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}/blocks"
+    },
+    {
+      "method": "PUT",
+      "path": "/api/deals/{dealId}/blocks"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/deals/{dealId}/blocks/{blockId}"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}/blocks/{blockId}"
+    },
+    {
+      "method": "PATCH",
+      "path": "/api/deals/{dealId}/blocks/{blockId}"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}/blocks/{blockId}/history"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/blocks/{blockId}/history"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/blocks/{blockId}/restore"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}/collaborators"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/collaborators"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/deals/{dealId}/collaborators/{userId}"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/collaborators/{userId}/restore"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}/command-center"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}/documents"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/documents"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/deals/{dealId}/documents/{slug}"
+    },
+    {
+      "method": "PATCH",
+      "path": "/api/deals/{dealId}/documents/{slug}"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/deals/{dealId}/documents/{slug}/html"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}/documents/{slug}/html"
+    },
+    {
+      "method": "PUT",
+      "path": "/api/deals/{dealId}/documents/{slug}/html"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}/documents/{slug}/html/history"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/documents/{slug}/html/restore/{version}"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/enrich"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}/facts"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/facts"
+    },
+    {
+      "method": "PATCH",
+      "path": "/api/deals/{dealId}/facts/{factId}"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}/feed"
+    },
+    {
+      "method": "PUT",
+      "path": "/api/deals/{dealId}/founders"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/ingest"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}/links"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/links"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/deals/{dealId}/links/{linkId}"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/links/{linkId}/restore"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/deals/{dealId}/memo"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}/memo"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/memo"
+    },
+    {
+      "method": "PUT",
+      "path": "/api/deals/{dealId}/memo"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/posts"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/propose-owner"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/refresh-brief"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/restore"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/threads"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/threads/{threadId}"
+    },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}/timeline"
+    },
+    {
+      "method": "POST",
+      "path": "/api/external/chat"
+    },
+    {
+      "method": "POST",
+      "path": "/api/external/start-session"
+    },
+    {
+      "method": "POST",
+      "path": "/api/external/upload"
+    },
+    {
+      "method": "GET",
+      "path": "/api/me"
+    },
+    {
+      "method": "GET",
+      "path": "/api/me/nominations"
+    },
+    {
+      "method": "GET",
+      "path": "/api/mentions"
+    },
+    {
+      "method": "GET",
+      "path": "/api/mentions/unread-count"
+    },
+    {
+      "method": "POST",
+      "path": "/api/mentions/{id}/resolve"
+    },
+    {
+      "method": "POST",
+      "path": "/api/nominations/{approvalId}"
+    },
+    {
+      "method": "GET",
+      "path": "/api/oauth/authorize"
+    },
+    {
+      "method": "POST",
+      "path": "/api/oauth/revoke"
+    },
+    {
+      "method": "POST",
+      "path": "/api/oauth/token"
+    },
+    {
+      "method": "GET",
+      "path": "/api/partner/approvals"
+    },
+    {
+      "method": "POST",
+      "path": "/api/partner/approvals"
+    },
+    {
+      "method": "GET",
+      "path": "/api/users"
+    },
+    {
+      "method": "POST",
+      "path": "/api/wiki/save"
+    },
+    {
+      "method": "GET",
+      "path": "/api/wiki/search"
+    },
+    {
+      "method": "DELETE",
+      "path": "/api/wiki/{slug}"
+    },
+    {
+      "method": "GET",
+      "path": "/api/wiki/{slug}"
+    },
+    {
+      "method": "POST",
+      "path": "/api/wiki/{slug}/restore"
+    }
+  ]
+}

package/lib/build-info.mjs

@@ -0,0 +1,34 @@
+import { createRequire } from "node:module";
+
+const requireFromHere = createRequire(import.meta.url);
+
+function readJson(relativePath) {
+  try {
+    return requireFromHere(relativePath);
+  } catch {
+    return null;
+  }
+}
+
+export function getBuildInfo() {
+  const built = readJson("./build-manifest.json");
+  if (built) return built;
+
+  const packageJson = readJson("../package.json") || {};
+  const contract = readJson("../contracts/core-api.json") || {};
+  return {
+    format: "llama.cli-build.v1",
+    packageName: packageJson.name || "@llamaventures/cli",
+    packageVersion: packageJson.version || "unknown",
+    sourceSha: "local/unknown",
+    sourceKind: "local",
+    sourceDirty: null,
+    coreApiContract: {
+      format: contract.format || "unknown",
+      name: contract.name || "llama-core-api",
+      apiVersion: contract.apiVersion || "unknown",
+      openapiVersion: contract.openapiVersion || "unknown",
+      sha256: contract.sha256 || "unknown",
+    },
+  };
+}

package/lib/build-manifest.json

@@ -0,0 +1,15 @@
+{
+  "format": "llama.cli-build.v1",
+  "packageName": "@llamaventures/cli",
+  "packageVersion": "1.20.0",
+  "sourceSha": "c9708c7ae6881e9e4a82972a521e748932a380ce",
+  "sourceKind": "github",
+  "sourceDirty": false,
+  "coreApiContract": {
+    "format": "llama.core-api-contract.v1",
+    "name": "llama-core-api",
+    "apiVersion": "3.1.0",
+    "openapiVersion": "3.0.3",
+    "sha256": "51b134af7a63534406b3a216aeab190fd595f5270b2a10263730662f1c2f771a"
+  }
+}

package/lib/client.mjs

@@ -14,6 +14,7 @@ import { fileURLToPath } from "url";
 import { execFile as _execFile } from "child_process";
 import { promisify } from "util";
 import { createHash, randomUUID } from "crypto";
+import { getBuildInfo } from "./build-info.mjs";
 
 const execFile = promisify(_execFile);
 
@@ -197,7 +198,6 @@ function rememberAgentEvent(event) {
     ...readAgentSession(),
     sessionId: event.sessionId || currentAgentSessionId(),
     lastEventId: event.eventId,
-    lastCandidateId: event.candidateId ?? null,
     lastCommand: event.command ?? null,
     lastQuery: event.query ?? null,
     lastSurface: event.surface ?? null,
@@ -207,9 +207,13 @@ function rememberAgentEvent(event) {
 }
 
 function agentClientHeaders(command) {
+  const build = getBuildInfo();
   return {
     "X-Llama-Client": runtimeClient,
     "X-Llama-Client-Version": getPackageVersion(),
+    "X-Llama-Client-Source-Sha": build.sourceSha,
+    "X-Llama-API-Contract-Version": build.coreApiContract.apiVersion,
+    "X-Llama-API-Contract-Digest": build.coreApiContract.sha256,
     "X-Llama-Agent-Client": detectAgentClient(),
     "X-Llama-Agent-Session": currentAgentSessionId(),
     "X-Llama-Command": command || "unknown",
@@ -288,6 +292,7 @@ function inferCommand(method, endpoint) {
   if (pathname === "/api/deals") return verb === "GET" ? "deal.search" : "deal.write";
   if (pathname === "/api/deals/create") return "deal.create";
   if (pathname === "/api/deals/update") return "deal.update";
+  if (/^\/api\/deals\/[^/]+\/ingest$/.test(pathname)) return "deal.ingest";
   if (/^\/api\/deals\/[^/]+\/threads\/[^/]+$/.test(pathname)) return "deal.agent.run";
   if (/^\/api\/deals\/[^/]+\/threads$/.test(pathname)) return "deal.thread.create";
   if (/^\/api\/deals\/[^/]+\/facts/.test(pathname)) return verb === "GET" ? "deal.fact.list" : "deal.fact.write";

package/lib/oauth-flow.mjs

@@ -173,6 +173,7 @@ export async function pkceLoopbackFlow({ baseUrl, scope, resource }) {
   });
 
   // Build authorize URL and open browser.
+  // @core-api-operation GET /api/oauth/authorize
   const authorizeUrl = new URL(`${baseUrl}/api/oauth/authorize`);
   authorizeUrl.searchParams.set("response_type", "code");
   authorizeUrl.searchParams.set("client_id", CLIENT_ID);

package/lib/version-check.mjs

@@ -73,6 +73,7 @@ async function fetchLatest() {
     // The /latest convenience endpoint returns full JSON under the default
     // Accept. (The abbreviated "vnd.npm.install-v1+json" metadata type is only
     // valid on the full packument endpoint — it 406s here.)
+    // @core-api-ignore external npm registry version check
     const res = await fetch(REGISTRY_URL, { signal: controller.signal });
     if (!res.ok) return null;
     const data = await res.json();

package/package.json

@@ -1,12 +1,16 @@
 {
   "name": "@llamaventures/cli",
-  "version": "1.18.1",
+  "version": "1.20.0",
   "description": "CLI + MCP server for the Llama Ventures investment workbench (command.llamaventures.vc).",
   "type": "module",
   "scripts": {
-    "test": "npm run test:agent-routing",
+    "test": "npm run test:agent-routing && npm run test:contract",
     "test:agent-routing": "node scripts/verify-agent-routing.mjs",
-    "verify:release": "npm test && node scripts/verify-tarball-clean.mjs && npm pack --dry-run"
+    "test:contract": "node --test scripts/build-manifest.test.mjs scripts/core-api-call-sites.test.mjs scripts/verify-core-api-contract.test.mjs && node scripts/verify-core-api-contract.mjs",
+    "verify:artifact": "node scripts/verify-release-artifact.mjs",
+    "verify:release": "npm test && npm run verify:artifact && node scripts/verify-tarball-clean.mjs",
+    "prepack": "node scripts/prepare-build-manifest.mjs",
+    "postpack": "node scripts/cleanup-build-manifest.mjs"
   },
   "bin": {
     "llama": "bin/llama.mjs",
@@ -14,6 +18,7 @@
   },
   "files": [
     "bin/",
+    "contracts/",
     "lib/",
     "AGENT_BRIEFING.md",
     "CHANGELOG.md",