@llamaventures/cli 1.23.1 → 1.24.0

package/CHANGELOG.md

@@ -6,6 +6,12 @@ this project adheres to [Semantic Versioning](https://semver.org).
 
 ## [Unreleased]
 
+## [1.24.0] - 2026-08-05
+
+### Added
+- Add `llama admin workflow audit --deal <uuid> | --all` for the read-only
+  Workflow V2 production integrity auditor in Llama Command 3.25.0.
+
 ## [1.23.1] - 2026-08-05
 
 ### Added

package/README.md

@@ -113,6 +113,14 @@ llama mentions
 llama agent-onboard                    # server-owned agent workflow contract
 ```
 
+System admins can run the read-only production integrity auditor against one
+Workflow V2 deal or every persisted V2 snapshot:
+
+```bash
+llama admin workflow audit --deal <dealId>
+llama admin workflow audit --all
+```
+
 Status vocabulary — `Interested`: tracked before any contact ·
 `Outreached`: contacted, no response yet · `Sourced`: real relationship
 signal exists. `sourceDirection` is separate: `Inbound` came to the firm,

package/README.zh-CN.md

@@ -135,6 +135,13 @@ llama mentions
 llama agent-onboard                    # 服务端下发的 agent 工作契约
 ```
 
+系统管理员可以只读审计一个 Workflow V2 deal，或审计全部已持久化的 V2 快照：
+
+```bash
+llama admin workflow audit --deal <dealId>
+llama admin workflow audit --all
+```
+
 Status 语义——`Interested`：接触前先记录关注 · `Outreached`：已联系、
 尚无回应 · `Sourced`：已有真实关系信号。`sourceDirection` 是独立维度：
 `Inbound` 流入，`Outbound` 我们主动。

package/bin/llama.mjs

@@ -36,6 +36,7 @@ import { LLAMA_CLI_CLIENT_ID, pkceLoopbackFlow, revokeToken as revokeOAuthToken
 import { deleteBundle, detectBackend, readBundle, writeBundle } from "../lib/oauth-storage.mjs";
 import { maybeNudgeUpdate, getUpdateNudge } from "../lib/version-check.mjs";
 import { getBuildInfo } from "../lib/build-info.mjs";
+import { workflowAuditPath } from "../lib/workflow-audit.mjs";
 
 const requireFromHere = createRequire(import.meta.url);
 const { version: PKG_VERSION } = requireFromHere("../package.json");
@@ -603,6 +604,7 @@ Deal page HTML (hand-authored sandboxed pages on /deals/<id>/browse/<slug>):
   update_deal_browse_html tool and the MCP html_upload_file tool.
 
 Admin (system admin only — server returns 403 for non-admin tokens):
+  llama admin workflow audit --deal <uuid> | --all
   llama admin auth-events  [--kind X] [--actor email] [--subject email] [--since 24h|7d|30d|<ISO>] [--limit 100]
   llama admin deal-events  [--kind X] [--actor email] [--deal <uuid>] [--since 24h] [--limit 100]
   llama admin agent-events [--kind tool_call|loop_stalled|max_turns_reached] [--agent-kind deal|secretary|main|inbox]
@@ -2403,12 +2405,21 @@ Routing — is this the right command?
   //   - agent-events : every AI tool call / loop_stalled / max_turns (AI ops)
   if (area === "admin") {
     const sub = action;
-    const valid = ["auth-events", "deal-events", "agent-events"];
+    const valid = ["workflow", "auth-events", "deal-events", "agent-events"];
     if (!valid.includes(sub)) {
       throw new Error(
         `Unknown admin sub-command "${sub || ""}". Use: ${valid.join(", ")}`
       );
     }
+    if (sub === "workflow") {
+      if (rest[0] !== "audit") {
+        throw new Error("Usage: llama admin workflow audit --deal <uuid> | --all");
+      }
+      const { flags } = parseFlags(rest.slice(1), ["deal", "all"]);
+      // @core-api-operation GET /api/admin/workflow-audit
+      print(await request("GET", workflowAuditPath(flags)));
+      return;
+    }
     const { flags } = parseFlags(rest);
     const params = new URLSearchParams();
     // Common filters across all three.

package/contracts/core-api.json

@@ -1,9 +1,9 @@
 {
   "format": "llama.core-api-contract.v1",
   "name": "llama-core-api",
-  "apiVersion": "3.23.0",
+  "apiVersion": "3.25.0",
   "openapiVersion": "3.0.3",
-  "sha256": "b959a28605693097ba8d8d9345729070d54fcce08f004abcfe9b8c2fd2dabc6d",
-  "pathCount": 233,
-  "operationCount": 304
+  "sha256": "f06bbd31d4e0e3fbf5f418a772616375f2a907535b0c7783060ba87b0565a0f7",
+  "pathCount": 235,
+  "operationCount": 306
 }

package/contracts/required-operations.json

@@ -14,6 +14,10 @@
       "method": "GET",
       "path": "/api/admin/deal-events"
     },
+    {
+      "method": "GET",
+      "path": "/api/admin/workflow-audit"
+    },
     {
       "method": "GET",
       "path": "/api/agent/activity"

package/lib/build-manifest.json

@@ -1,15 +1,15 @@
 {
   "format": "llama.cli-build.v1",
   "packageName": "@llamaventures/cli",
-  "packageVersion": "1.23.1",
-  "sourceSha": "8d5824095c03137b224bdbff50bc6be144d37486",
+  "packageVersion": "1.24.0",
+  "sourceSha": "501f361cc0aeaa8746e1387a11f6224ca66bca13",
   "sourceKind": "github",
   "sourceDirty": false,
   "coreApiContract": {
     "format": "llama.core-api-contract.v1",
     "name": "llama-core-api",
-    "apiVersion": "3.23.0",
+    "apiVersion": "3.25.0",
     "openapiVersion": "3.0.3",
-    "sha256": "b959a28605693097ba8d8d9345729070d54fcce08f004abcfe9b8c2fd2dabc6d"
+    "sha256": "f06bbd31d4e0e3fbf5f418a772616375f2a907535b0c7783060ba87b0565a0f7"
   }
 }

package/lib/workflow-audit.mjs

@@ -0,0 +1,13 @@
+export function workflowAuditPath(flags) {
+  const deal = typeof flags.deal === "string" && flags.deal.trim()
+    ? flags.deal.trim()
+    : null;
+  const all = flags.all === true;
+  if ((!deal && !all) || (deal && all)) {
+    throw new Error("Usage: llama admin workflow audit --deal <uuid> | --all");
+  }
+  const params = new URLSearchParams();
+  if (deal) params.set("deal", deal);
+  if (all) params.set("all", "true");
+  return `/api/admin/workflow-audit?${params.toString()}`;
+}

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@llamaventures/cli",
-  "version": "1.23.1",
+  "version": "1.24.0",
   "description": "CLI + MCP server for the Llama Ventures investment workbench (command.llamaventures.vc).",
   "type": "module",
   "scripts": {
     "test": "npm run test:agent-routing && npm run test:contract",
     "test:agent-routing": "node scripts/verify-agent-routing.mjs",
-    "test:contract": "node --test scripts/build-manifest.test.mjs scripts/core-api-call-sites.test.mjs scripts/investment-workflow-contract.test.mjs scripts/server-compatibility.test.mjs scripts/verify-core-api-contract.test.mjs && node scripts/verify-core-api-contract.mjs",
+    "test:contract": "node --test scripts/build-manifest.test.mjs scripts/core-api-call-sites.test.mjs scripts/investment-workflow-contract.test.mjs scripts/server-compatibility.test.mjs scripts/verify-core-api-contract.test.mjs scripts/workflow-audit.test.mjs && node scripts/verify-core-api-contract.mjs",
     "verify:artifact": "node scripts/verify-release-artifact.mjs",
     "verify:release": "npm test && npm run verify:artifact && node scripts/verify-tarball-clean.mjs",
     "prepack": "node scripts/prepare-build-manifest.mjs",