@llamaventures/cli 1.24.0 → 1.26.0

package/AGENT_BRIEFING.md

@@ -150,6 +150,7 @@ The table below details the exact CLI for each destination.
 | HTML artifact, external — founder-facing share link | Netlify | Only when the user explicitly says "share link", "give it to the founder", "publish publicly". Use the `netlify-access-guard` workflow (server-side password + edge 401 verification). |
 | Insights, decisions, framework improvements | Wiki (markdown) | `llama wiki save <slug> --content "..."` (with attribution — see below) |
 | **HTML wiki entry — standalone HTML page hosted at `/wiki/<slug>`** (sector landscape, market map, dashboard, hand-styled thesis page) | **Wiki (HTML)** | `llama wiki save <slug> --title "..." --file <path.html> --sources "..."`. Auto-detects content_type=html from extension. Public page is full-viewport sandboxed iframe takeover (no wiki chrome). Sources/status/title still required; appears in `wiki search` + backlinks. Use when the user says "deploy this HTML to wiki", "wiki 词条", "make this page a wiki entry". HTML must be self-contained (inline CSS/JS, image data URIs or external URLs) — asset bundles aren't supported on wiki yet. **Native comments + working in-page (#) anchor links are injected automatically** — readers discuss inline and the table of contents scrolls; you don't wire anything up (pages that already embed the comment widget are left as-is). |
+| **Document wiki entry — a PDF / DOCX / XLSX read at `/wiki/<slug>`** (deck, market model, memo you were handed) | **Wiki (document)** | `llama wiki save <slug> --title "..." --file <path.{pdf,docx,xlsx}> --sources "..."`. The document itself is what readers open: a PDF in the browser's own viewer with page navigation, a DOCX or XLSX converted for reading with the original still downloadable. Use when someone hands you a file and wants it ON the wiki. Do NOT transcribe it into markdown, and do NOT write an article describing a file nobody can open. |
 | Large files (deck / PDF / transcript) | Drive deal folder | the deal's `folder_url` (from `llama deal show`) → upload via your filesystem / Drive tool |
 | Cross-team cues | Inbox + email | `llama post <dealId> "@<teammate> ..." --cue` — use `--cue` only after the user explicitly authorized that recipient |
 
@@ -288,6 +289,13 @@ llama wiki save <slug> --title "..." --file path.html --sources "..." [--content
 #   --content-type html (or markdown) overrides the inference.
 #   Refuses to switch content_type on an existing slug; delete + re-create
 #   if you really mean to change format.
+
+# Document entry — the file IS the entry, readable at /wiki/<slug>:
+llama wiki save <slug> --title "..." --file path.{pdf,docx,xlsx} --sources "..." [--doc-kind ...]
+#   PDF opens in the browser's viewer; DOCX and XLSX are converted for reading
+#   (a spreadsheet keeps one tab per sheet). The original stays downloadable.
+#   Upload the document you have — do NOT transcribe it into markdown first,
+#   and do NOT write an article describing a file nobody can open.
 # Delete / restore (soft, reversible — CONSTITUTION §8):
 llama wiki delete  <slug> [--lang en|zh]
 llama wiki restore <slug> [--lang en|zh]

package/CHANGELOG.md

@@ -6,6 +6,31 @@ this project adheres to [Semantic Versioning](https://semver.org).
 
 ## [Unreleased]
 
+## [1.26.0] - 2026-08-11
+
+### Added
+- `llama wiki save <slug> --file <path>.{pdf,docx,xlsx}` uploads the document
+  itself as the wiki entry, so readers open it at `/wiki/<slug>` instead of an
+  article describing it. A PDF opens in the browser's own viewer; DOCX and XLSX
+  are converted for reading with the original still downloadable.
+- `wiki_save_file` MCP tool — the same publish from a local file path, for
+  MCP-native agents, mirroring `html_upload_file`.
+
+### Changed
+- Pin the Core API consumer contract to 3.33.0. The wiki document upload calls
+  an operation that does not exist on older Llama Command.
+
+### Removed
+- Retire every CLI/MCP Memo mutation path. `llama memo` and MCP now expose the
+  current Memo read-only; generation runs only from Llama Command's durable
+  Memo Agent. Deal enrichment no longer accepts `--memo` / `generateMemo`.
+
+## [1.25.0] - 2026-08-05
+
+### Added
+- Add preview-first, revision-fenced `llama admin workflow remediate` for the
+  two allowlisted Workflow V2 false-green intake checks in Llama Command 3.26.0.
+
 ## [1.24.0] - 2026-08-05
 
 ### Added

package/README.md

@@ -121,6 +121,18 @@ llama admin workflow audit --deal <dealId>
 llama admin workflow audit --all
 ```
 
+For the two supported false-green intake checks, remediation is preview-first
+and one deal at a time. Apply requires the exact revision returned by preview:
+
+```bash
+llama admin workflow remediate --deal <dealId> --guard intake.reason_why
+llama admin workflow remediate --deal <dealId> --guard intake.reason_why \
+  --apply --expected-revision <revision> --reason "Confirmed missing canonical evidence"
+```
+
+The server can only invalidate a system-generated green. It cannot advance a
+deal, satisfy a check, change status/ownership, or override a human resolution.
+
 Status vocabulary — `Interested`: tracked before any contact ·
 `Outreached`: contacted, no response yet · `Sourced`: real relationship
 signal exists. `sourceDirection` is separate: `Inbound` came to the firm,

package/README.zh-CN.md

@@ -142,6 +142,18 @@ llama admin workflow audit --deal <dealId>
 llama admin workflow audit --all
 ```
 
+对当前支持的两个 intake 假绿检查，修复必须先 preview，并且一次只处理一个 deal。
+Apply 必须携带 preview 返回的精确 revision：
+
+```bash
+llama admin workflow remediate --deal <dealId> --guard intake.reason_why
+llama admin workflow remediate --deal <dealId> --guard intake.reason_why \
+  --apply --expected-revision <revision> --reason "已确认 canonical 证据缺失"
+```
+
+服务端只能把系统生成的绿灯改回未满足；不能推进 deal、把检查改成已满足、修改
+status/owner，也不能覆盖人工 resolution。
+
 Status 语义——`Interested`：接触前先记录关注 · `Outreached`：已联系、
 尚无回应 · `Sourced`：已有真实关系信号。`sourceDirection` 是独立维度：
 `Inbound` 流入，`Outbound` 我们主动。

package/bin/llama-mcp.mjs

@@ -116,9 +116,6 @@ function buildEnrichmentAgentMessage(args = {}) {
     "monid",
   ];
   const budget = args.budgetCents ?? "50";
-  const memo = args.generateMemo
-    ? "Generate memo only after enrichment because the caller explicitly requested it."
-    : "Do not generate memo.";
   return [
     "Run server-side deal enrichment for this deal.",
     `Use sources: ${sources.join(", ")}.`,
@@ -127,7 +124,7 @@ function buildEnrichmentAgentMessage(args = {}) {
     "Write canonical evidence links, sourced deal facts, stable deal fields, and typed factual values where supported.",
     "For typed factual values, call read_typed_factual_layer first and use upsert_typed_fact for queryable fields.",
     "Search snippets alone are not high-confidence evidence; fetch direct sources where possible.",
-    memo,
+    "Do not generate Memo; the durable Memo Agent in Llama Command owns that separate workflow.",
     "End with what was written, what was skipped, and open questions.",
   ].join(" ");
 }
@@ -1046,6 +1043,95 @@ server.registerTool(
     })
 );
 
+server.registerTool(
+  "wiki_save_file",
+  {
+    description:
+      "Publish a PDF / DOCX / XLSX from a LOCAL FILE PATH as the wiki entry " +
+      "itself. Readers open the document at /wiki/<slug>: a PDF in the " +
+      "browser's own viewer with page navigation, a DOCX or XLSX converted " +
+      "for reading (a spreadsheet keeps one tab per sheet), and the original " +
+      "always downloadable. Use this whenever someone hands you a document " +
+      "and wants it ON the wiki — do NOT transcribe it into markdown for " +
+      "wiki_save, and do NOT write an article describing a file nobody can " +
+      "open. Reads filePath on the machine running this MCP server, so the " +
+      "bytes never pass through tool-call context. Deal-specific documents " +
+      "belong on the deal page instead (html_upload_file).",
+    inputSchema: {
+      slug: z.string().describe("kebab-case slug"),
+      title: z.string(),
+      filePath: z
+        .string()
+        .describe("absolute or relative local path to a .pdf / .docx / .xlsx"),
+      sources: z
+        .array(z.string())
+        .min(1)
+        .describe(
+          "citation list — URLs, doc names, or meeting references. At least one required."
+        ),
+      type: z.string().optional().describe("optional category tag, e.g. 'company'"),
+      doc_kind: z
+        .string()
+        .optional()
+        .describe("optional — how the wiki home browses and search filters"),
+      lang: z.enum(["en", "zh"]).optional().describe("default: en"),
+    },
+  },
+  async ({ slug, title, filePath, sources, type, doc_kind, lang }) => {
+    const { readFileSync } = await import("node:fs");
+    const { basename } = await import("node:path");
+    const ext = String(filePath).toLowerCase().match(/\.(pdf|docx|xlsx)$/)?.[1];
+    if (!ext) {
+      return textResult(
+        `Error: wiki_save_file takes a .pdf, .docx, or .xlsx. For markdown or a ` +
+          `standalone HTML page, use wiki_save.`,
+        true,
+      );
+    }
+    let buf;
+    try {
+      buf = readFileSync(String(filePath));
+    } catch (err) {
+      return textResult(`Error reading ${filePath}: ${err?.message ?? String(err)}`, true);
+    }
+    const MAX = 50 * 1024 * 1024;
+    if (buf.length > MAX) {
+      return textResult(
+        `Error: ${basename(String(filePath))} is ${(buf.length / 1024 / 1024).toFixed(1)} MB; ` +
+          `the wiki caps files at 50 MB. Link to the Drive copy instead.`,
+        true,
+      );
+    }
+    const mime = {
+      pdf: "application/pdf",
+      docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+      xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+    }[ext];
+    const form = new FormData();
+    form.append("file", new Blob([buf], { type: mime }), basename(String(filePath)));
+    form.append("title", String(title));
+    form.append("sources", sources.join(";"));
+    form.append("lang", lang === "zh" ? "zh" : "en");
+    if (type) form.append("type", String(type));
+    if (doc_kind) form.append("doc_kind", String(doc_kind));
+
+    const headers = await getAuthHeaders();
+    // @core-api-operation POST /api/wiki/{slug}/file
+    const res = await fetch(
+      `${getBaseUrl()}/api/wiki/${encodeURIComponent(slug)}/file`,
+      { method: "POST", headers, body: form }, // let fetch set the multipart boundary
+    );
+    const body = await res.json().catch(() => ({}));
+    if (!res.ok) {
+      return textResult(
+        `HTTP ${res.status}: ${body?.error || JSON.stringify(body).slice(0, 300)}`,
+        true,
+      );
+    }
+    return textResult(JSON.stringify(body, null, 2));
+  },
+);
+
 server.registerTool(
   "wiki_delete",
   {
@@ -1212,9 +1298,8 @@ server.registerTool(
       "status, and planned writes without changing facts/links/memo. With " +
       "apply=true and executor=server_agent, this starts the server-side Deal " +
       "Agent unless harnessOnly=true. Set apply=true only when the user " +
-      "explicitly wants the enrichment run recorded/applied. " +
-      "generateMemo never defaults on; pass true only when the user explicitly asks " +
-      "for Memo generation after enrichment.",
+      "explicitly wants the enrichment run recorded/applied. Memo generation is " +
+      "not part of enrichment and is available only in Llama Command's Memo Agent.",
     inputSchema: {
       dealId: z.string().describe("deal uuid"),
       dryRun: z.boolean().optional().describe("default true unless apply=true"),
@@ -1234,10 +1319,6 @@ server.registerTool(
         .max(500)
         .optional()
         .describe("Monid spend cap for this run, in cents; default is 50 when Monid is requested"),
-      generateMemo: z
-        .boolean()
-        .optional()
-        .describe("explicitly request memo regeneration after enrichment; default false"),
       harnessOnly: z
         .boolean()
         .optional()
@@ -1248,13 +1329,13 @@ server.registerTool(
         .describe("optional override instruction for the server-side Deal Agent"),
     },
   },
-  async ({ dealId, dryRun, apply, executor, sources, budgetCents, generateMemo, harnessOnly, message }) => {
+  async ({ dealId, dryRun, apply, executor, sources, budgetCents, harnessOnly, message }) => {
     const effectiveExecutor = executor ?? "server_agent";
     if (apply === true && effectiveExecutor === "server_agent" && harnessOnly !== true) {
       return runDealAgentTool({
         dealId,
         title: "MCP enrichment",
-        message: buildEnrichmentAgentMessage({ sources, budgetCents, generateMemo, message }),
+        message: buildEnrichmentAgentMessage({ sources, budgetCents, message }),
       });
     }
     return callApi("POST", `/api/deals/${encodeURIComponent(dealId)}/enrich`, {
@@ -1263,7 +1344,6 @@ server.registerTool(
       executor: effectiveExecutor,
       sources,
       budgetCents,
-      generateMemo,
     });
   }
 );
@@ -1432,7 +1512,7 @@ server.registerTool(
 );
 
 // ============================================================
-// Memo — long-form HTML investment memo (the Memo tab in the UI)
+// Memo — read-only. Generation runs only from the durable Memo Agent in the UI.
 // ============================================================
 
 server.registerTool(
@@ -1440,9 +1520,7 @@ server.registerTool(
   {
     description:
       "Fetch the current memo for a deal. Returns the envelope: memo " +
-      "(html, version, source, updated_by, updated_at), mode " +
-      "('composed' = server-generated, 'override' = hand-written), and " +
-      "inflight (if a server-side regeneration is in progress). html " +
+      "(html, version, source, updated_by, updated_at) and mode. html " +
       "can be 50-100KB — be deliberate about including it in your reply.",
     inputSchema: {
       dealId: z.string().describe("deal uuid"),
@@ -1452,81 +1530,6 @@ server.registerTool(
     callApi("GET", `/api/deals/${encodeURIComponent(dealId)}/memo`)
 );
 
-server.registerTool(
-  "memo_regenerate",
-  {
-    description:
-      "Trigger server-side regeneration of the deal memo. Synchronous: " +
-      "returns the final result (version, model, duration_ms, degraded) " +
-      "once the composer finishes. Typical duration 2-3 minutes. Use " +
-      "tier='opus' for high-stakes deals (higher cost, deeper analysis). " +
-      "Pass `instructions` to steer THIS regeneration (e.g. 'focus on team " +
-      "risk', 'frame as a follow-on') — applied across all panels, never " +
-      "overrides the facts or the verdict.",
-    inputSchema: {
-      dealId: z.string().describe("deal uuid"),
-      tier: z
-        .enum(["sonnet", "opus"])
-        .optional()
-        .describe("LLM tier (default: sonnet)"),
-      instructions: z
-        .string()
-        .optional()
-        .describe(
-          "Free-text steering for this regeneration only, e.g. 'focus on team risk'. Applied to all panels; never overrides verified facts or the verdict anchor."
-        ),
-    },
-  },
-  async ({ dealId, tier, instructions }) =>
-    callApi("POST", `/api/deals/${encodeURIComponent(dealId)}/memo`, {
-      action: "regenerate",
-      stream: false,
-      model: tier ?? "sonnet",
-      instructions: instructions || undefined,
-    })
-);
-
-server.registerTool(
-  "memo_save",
-  {
-    description:
-      "Save hand-written HTML as a manual override for a deal's memo. " +
-      "Manual overrides take precedence over auto-composed memos on " +
-      "read. Pass the full HTML document including <!DOCTYPE html>, " +
-      "<style>, and <body> — it's rendered as-is in a sandboxed iframe.",
-    inputSchema: {
-      dealId: z.string().describe("deal uuid"),
-      html: z
-        .string()
-        .describe("full HTML document"),
-    },
-  },
-  async ({ dealId, html }) =>
-    callApi("PUT", `/api/deals/${encodeURIComponent(dealId)}/memo`, { html })
-);
-
-server.registerTool(
-  "memo_reset",
-  {
-    description:
-      "Reset memo state. Default drops only the manual override row " +
-      "(next read falls back to the auto-composed version, if any). " +
-      "Pass scope='all' to drop every version for the deal — destructive, " +
-      "use sparingly.",
-    inputSchema: {
-      dealId: z.string().describe("deal uuid"),
-      scope: z
-        .enum(["override_only", "all"])
-        .optional()
-        .describe("default: override_only"),
-    },
-  },
-  async ({ dealId, scope }) =>
-    callApi("DELETE", `/api/deals/${encodeURIComponent(dealId)}/memo`, {
-      scope: scope ?? "override_only",
-    })
-);
-
 // ============================================================
 // Deal page HTML — hand-authored sandboxed page per deal
 // ============================================================

package/bin/llama.mjs

@@ -37,6 +37,10 @@ import { deleteBundle, detectBackend, readBundle, writeBundle } from "../lib/oau
 import { maybeNudgeUpdate, getUpdateNudge } from "../lib/version-check.mjs";
 import { getBuildInfo } from "../lib/build-info.mjs";
 import { workflowAuditPath } from "../lib/workflow-audit.mjs";
+import {
+  WORKFLOW_REMEDIATION_PATH,
+  workflowRemediationBody,
+} from "../lib/workflow-remediation.mjs";
 
 const requireFromHere = createRequire(import.meta.url);
 const { version: PKG_VERSION } = requireFromHere("../package.json");
@@ -310,9 +314,6 @@ function buildEnrichmentAgentMessage(flags) {
     "monid",
   ];
   const budget = flags["budget-cents"] || flags.budgetCents || "50";
-  const memo = boolFlag(flags, "memo", "generate-memo", "generateMemo")
-    ? "Generate memo only after enrichment because the caller explicitly requested it."
-    : "Do not generate memo.";
   return [
     "Run server-side deal enrichment for this deal.",
     `Use sources: ${sources.join(", ")}.`,
@@ -321,7 +322,7 @@ function buildEnrichmentAgentMessage(flags) {
     "Write canonical evidence links, sourced deal facts, stable deal fields, and typed factual values where supported.",
     "For typed factual values, call read_typed_factual_layer first and use upsert_typed_fact for queryable fields.",
     "Search snippets alone are not high-confidence evidence; fetch direct sources where possible.",
-    memo,
+    "Do not generate Memo; the durable Memo Agent in Llama Command owns that separate workflow.",
     "End with what was written, what was skipped, and open questions.",
   ].join(" ");
 }
@@ -405,7 +406,7 @@ Deals:
             llama deal update <dealId> leadInvestor "Acme Capital"
   llama deal enrich <dealId> [--dry-run] [--apply] [--executor server_agent|external_agent|planner]
                             [--sources website,github,linkedin,yc,monid] [--budget-cents 50]
-                            [--memo] [--prompt] [--harness-only]
+                            [--prompt] [--harness-only]
       dry-run returns the harness; --apply --executor server_agent runs the server Deal Agent.
   llama deal agent run <dealId> --message "collect founder evidence and update typed facts"
   llama deal extra set <dealId> <key> <value>        # system-admin only
@@ -535,6 +536,8 @@ Where does this HTML / thesis / artifact go?
                                       (renders at /deals/<id>/browse/<slug>; see "Deal page HTML" below)
   Cross-deal / institutional? ..... llama wiki save <slug> --title "..." --file <path>.html --sources "..."
                                       (renders at /wiki/<slug>; see "Wiki" below)
+  A document, not a page? ......... llama wiki save <slug> --title "..." --file <path>.{pdf,docx,xlsx} --sources "..."
+                                      (the file itself becomes the entry; see "Wiki" below)
   Founder-facing public share? .... Netlify (with netlify-access-guard skill), only when user explicitly
                                       says "share publicly". Llama Command outranks Netlify for everything
                                       internal — don't reach for Netlify by default.
@@ -548,17 +551,19 @@ Wiki:
     llama wiki save <slug> --title "..." --file path.html --sources "..." [--content-type html]
       (.html / .htm extension auto-implies content_type=html)
       Native comments + working in-page (#) links are added automatically — just upload self-contained HTML.
+  Document entry — the file itself is the entry, readable at /wiki/<slug>:
+    llama wiki save <slug> --title "..." --file path.{pdf,docx,xlsx} --sources "..." [--doc-kind ...]
+      PDF opens in the browser's viewer (pages, search, zoom); DOCX and XLSX are converted for reading,
+      a spreadsheet keeping one tab per sheet. The original stays downloadable from the page either way.
+      Upload the document you have — don't transcribe it into markdown first.
   ➜ Use Wiki when the artifact is NOT tied to one specific deal — sector landscape, market map,
     thesis, framework, methodology. For deal-specific HTML use "llama html publish <deal>" instead.
   Delete / restore (soft — reversible):
     llama wiki delete <slug> [--lang en|zh]
     llama wiki restore <slug> [--lang en|zh]
 
-Memo (long-form HTML investment memo — Memo tab in the UI):
+Memo (read-only; generation runs only from the Memo Agent in Llama Command):
   llama memo show <dealId> [--out <path>] [--json]          # default: html → stdout (pipeable to file / browser)
-  llama memo regenerate <dealId> [--opus] [--instructions "..."]  # --instructions steers THIS run (e.g. "focus on team risk"); progress → stderr
-  llama memo save <dealId> --file <path>                     # paste a hand-written HTML as manual override
-  llama memo reset <dealId> [--all]                          # default drops manual override; --all drops every version
 
 Deal page HTML (hand-authored sandboxed pages on /deals/<id>/browse/<slug>):
   ➜ Use this for DEAL-SPECIFIC artifacts: IC memo for X, dashboard for X, 2×2 for X.
@@ -605,6 +610,8 @@ Deal page HTML (hand-authored sandboxed pages on /deals/<id>/browse/<slug>):
 
 Admin (system admin only — server returns 403 for non-admin tokens):
   llama admin workflow audit --deal <uuid> | --all
+  llama admin workflow remediate --deal <uuid> --guard intake.reason_why[,intake.founder_identity]
+                                [--apply --expected-revision <n> --reason "..."]
   llama admin auth-events  [--kind X] [--actor email] [--subject email] [--since 24h|7d|30d|<ISO>] [--limit 100]
   llama admin deal-events  [--kind X] [--actor email] [--deal <uuid>] [--since 24h] [--limit 100]
   llama admin agent-events [--kind tool_call|loop_stalled|max_turns_reached] [--agent-kind deal|secretary|main|inbox]
@@ -1641,7 +1648,7 @@ async function main() {
       throw new Error(
         "Usage: llama deal enrich <dealId> [--dry-run] [--apply] " +
         "[--executor server_agent|external_agent|planner] " +
-        "[--sources website,github,linkedin,yc,monid] [--budget-cents 50] [--memo] [--prompt]"
+        "[--sources website,github,linkedin,yc,monid] [--budget-cents 50] [--prompt]"
       );
     }
     const { flags } = parseFlags(rest.slice(1), [
@@ -1650,9 +1657,6 @@ async function main() {
       "executor",
       "sources",
       "budget-cents",
-      "memo",
-      "generate-memo",
-      "generateMemo",
       "prompt",
       "handoff",
       "harness-only",
@@ -1680,7 +1684,6 @@ async function main() {
         executor,
         sources,
         budgetCents,
-        generateMemo: boolFlag(flags, "memo", "generate-memo", "generateMemo"),
       }
     );
     if (flags.prompt === true || flags.handoff === true) {
@@ -2117,9 +2120,13 @@ async function main() {
   llama wiki save <slug> --title "..." --content "..." --sources "url1;url2" [--type company] [--related "A;B"] [--lang en|zh] [--content-type markdown|html]
 or
   llama wiki save <slug> --title "..." --file path/to/article.{md,html} --sources "url1;url2" [--type company] [--related "A;B"] [--lang en|zh] [--content-type markdown|html]
+or, to put a document itself on the wiki:
+  llama wiki save <slug> --title "..." --file path/to/deck.{pdf,docx,xlsx} --sources "..." [--doc-kind ...]
 
 Pass either --content (inline) or --file (read from disk). With --file, content_type auto-detects from extension (.html/.htm → html, else markdown). Use --content-type to override.
 
+A .pdf / .docx / .xlsx uploads as the entry itself: readers open the document at /wiki/<slug> — a PDF in the browser's viewer, a spreadsheet with one tab per sheet — and the original stays downloadable. --content-type does not apply there.
+
 Routing — is this the right command?
   ✓ Cross-deal / institutional knowledge (sector landscape, market map, thesis, framework, methodology)
       → YES, you're in the right place.
@@ -2133,6 +2140,58 @@ Routing — is this the right command?
     if (inlineContent && filePath) {
       throw new Error("Pass either --content OR --file, not both.");
     }
+    const splitCsvFlag = (v) => String(v).split(/[;|]/).map((s) => s.trim()).filter(Boolean);
+
+    // A document goes up as bytes, not as text. The server converts DOCX and
+    // XLSX for the reader and keeps the original for download; a PDF opens in
+    // the browser's own viewer. Everything else here stays the JSON path.
+    const docExt = filePath
+      ? String(filePath).toLowerCase().match(/\.(pdf|docx|xlsx)$/)?.[1]
+      : null;
+    if (docExt) {
+      if (flags["content-type"]) {
+        throw new Error(
+          `--content-type does not apply to a .${docExt}: the server decides how to render it from the file itself.`,
+        );
+      }
+      const { readFileSync } = await import("fs");
+      const { basename } = await import("path");
+      const buf = readFileSync(String(filePath));
+      const MAX = 50 * 1024 * 1024;
+      if (buf.length > MAX) {
+        throw new Error(
+          `${basename(String(filePath))} is ${buf.length} bytes; the wiki caps files at ${MAX} (50MB). Link to the Drive copy instead.`,
+        );
+      }
+      const mime = {
+        pdf: "application/pdf",
+        docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+        xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+      }[docExt];
+      const form = new FormData();
+      form.append("file", new Blob([buf], { type: mime }), basename(String(filePath)));
+      form.append("lang", flags.lang === "zh" ? "zh" : "en");
+      form.append("title", String(title));
+      form.append("sources", splitCsvFlag(sourcesRaw).join(";"));
+      if (flags.type) form.append("type", String(flags.type));
+      if (flags["doc-kind"]) form.append("doc_kind", String(flags["doc-kind"]));
+
+      const headers = await getAuthHeaders();
+      // @core-api-operation POST /api/wiki/{slug}/file
+      const res = await fetch(
+        `${getBaseUrl()}/api/wiki/${encodeURIComponent(slug)}/file`,
+        { method: "POST", headers, body: form },
+      );
+      const out = await res.json().catch(() => ({}));
+      if (!res.ok) {
+        throw new Error(
+          `HTTP ${res.status}: ${out?.error || JSON.stringify(out).slice(0, 300)}`,
+        );
+      }
+      print(out);
+      return;
+    }
+
     // Read body — either inline or from file.
     let body;
     let inferredType = "markdown";
@@ -2412,12 +2471,28 @@ Routing — is this the right command?
       );
     }
     if (sub === "workflow") {
-      if (rest[0] !== "audit") {
-        throw new Error("Usage: llama admin workflow audit --deal <uuid> | --all");
+      if (!["audit", "remediate"].includes(rest[0])) {
+        throw new Error("Usage: llama admin workflow audit|remediate ...");
+      }
+      if (rest[0] === "audit") {
+        const { flags } = parseFlags(rest.slice(1), ["deal", "all"]);
+        // @core-api-operation GET /api/admin/workflow-audit
+        print(await request("GET", workflowAuditPath(flags)));
+        return;
       }
-      const { flags } = parseFlags(rest.slice(1), ["deal", "all"]);
-      // @core-api-operation GET /api/admin/workflow-audit
-      print(await request("GET", workflowAuditPath(flags)));
+      const { flags } = parseFlags(rest.slice(1), [
+        "deal",
+        "guard",
+        "apply",
+        "expected-revision",
+        "reason",
+      ]);
+      const body = workflowRemediationBody(
+        flags,
+        flags.apply === true ? `cli-workflow-remediation-${randomUUID()}` : undefined,
+      );
+      // @core-api-operation POST /api/admin/workflow-remediation
+      print(await request("POST", WORKFLOW_REMEDIATION_PATH, body));
       return;
     }
     const { flags } = parseFlags(rest);
@@ -2490,13 +2565,9 @@ Routing — is this the right command?
     throw new Error(`Unknown mentions subcommand "${sub}". Use: list / show / resolve / unread.`);
   }
 
-  // ----- Memo (long-form HTML investment memo) -----
-  // The Memo tab in the deal page renders HTML stored in deal_memos.
-  // Two sources of memo content:
-  //   - composed: generated by the server-side memo composer on demand
-  //   - manual:   a hand-written HTML you paste in
-  // Manual always beats composed on read; reset to drop the manual row
-  // and fall back to the composed one.
+  // ----- Memo (read-only) -----
+  // Generation is intentionally absent from CLI. The durable Memo Agent in
+  // Llama Command owns the only generation path.
   if (area === "memo") {
     const sub = action;
 
@@ -2520,9 +2591,7 @@ Routing — is this the right command?
       const html = data?.memo?.html;
       if (!html) {
         if (data?.requires_compose) {
-          throw new Error(
-            "No memo for this deal yet — run `llama memo regenerate <dealId>` to compose one."
-          );
+          throw new Error("No memo for this deal yet — generate it with the Memo Agent in Llama Command.");
         }
         throw new Error("Memo response missing html field.");
       }
@@ -2538,152 +2607,8 @@ Routing — is this the right command?
       return;
     }
 
-    // regenerate — kick off the server-side composer. Streams panel
-    // progress events to stderr so you can see live status; prints
-    // final summary JSON (version, model, duration) to stdout.
-    if (sub === "regenerate") {
-      const dealId = rest[0];
-      if (!dealId) {
-        throw new Error(
-          'Usage: llama memo regenerate <dealId> [--opus] [--instructions "..."]'
-        );
-      }
-      const { flags } = parseFlags(rest.slice(1));
-      const tier = flags.opus ? "opus" : "sonnet";
-      const authHeaders = await getAuthHeaders();
-      if (Object.keys(authHeaders).length === 0) {
-        throw new Error(
-          "Not authenticated. Run `gcloud auth login` or `llama token set <llc_...>` first."
-        );
-      }
-      const res = await fetch(
-        `${getBaseUrl()}/api/deals/${encodeURIComponent(dealId)}/memo`,
-        {
-          method: "POST",
-          headers: { "Content-Type": "application/json", ...authHeaders },
-          body: JSON.stringify({
-            action: "regenerate",
-            stream: true,
-            model: tier,
-            instructions: flags.instructions
-              ? String(flags.instructions)
-              : undefined,
-          }),
-        }
-      );
-      if (!res.ok || !res.body) {
-        const text = await res.text().catch(() => "");
-        throw new Error(`HTTP ${res.status}: ${text.slice(0, 300)}`);
-      }
-
-      const reader = res.body.getReader();
-      const decoder = new TextDecoder();
-      let buffer = "";
-      let doneEvent = null;
-      const startedAt = Date.now();
-      const progress = { done: 0, total: 12, placeholders: 0, retries: 0 };
-
-      while (true) {
-        const { value, done: streamDone } = await reader.read();
-        if (streamDone) break;
-        buffer += decoder.decode(value, { stream: true });
-        let idx;
-        while ((idx = buffer.indexOf("\n\n")) !== -1) {
-          const frame = buffer.slice(0, idx);
-          buffer = buffer.slice(idx + 2);
-          const dataLine = frame.split("\n").find((l) => l.startsWith("data:"));
-          if (!dataLine) continue;
-          let event;
-          try {
-            event = JSON.parse(dataLine.replace(/^data:\s?/, ""));
-          } catch {
-            continue;
-          }
-          const elapsed = ((Date.now() - startedAt) / 1000).toFixed(1);
-          const phase = event.phase || "?";
-          if (phase === "panel_done") {
-            progress.done = event.panels_completed ?? progress.done + 1;
-            progress.total = event.panels_total ?? progress.total;
-            if (event.status === "placeholder") progress.placeholders += 1;
-            if (event.status === "retry-recovered") progress.retries += 1;
-            const mark =
-              event.status === "ok"
-                ? "✓"
-                : event.status === "retry-recovered"
-                  ? "↻"
-                  : "⚠";
-            console.error(
-              `${elapsed}s  ${mark} ${event.panel} [${progress.done}/${progress.total}]`
-            );
-          } else if (phase === "anchor_done") {
-            console.error(
-              `${elapsed}s  anchor → ${event.verdict_label || event.verdict}`
-            );
-          } else if (phase === "assembling") {
-            console.error(`${elapsed}s  assembling…`);
-          } else if (phase === "done") {
-            doneEvent = event;
-          } else if (phase === "error") {
-            throw new Error(`Memo composer error: ${event.error}`);
-          }
-        }
-      }
-
-      if (!doneEvent) {
-        throw new Error("Stream ended without 'done' event.");
-      }
-      print({
-        ok: true,
-        version: doneEvent.version,
-        degraded: doneEvent.degraded,
-        model: doneEvent.model,
-        duration_ms: doneEvent.duration_ms,
-        placeholders: progress.placeholders,
-        retries: progress.retries,
-      });
-      return;
-    }
-
-    // save — upload hand-written HTML as a manual override.
-    if (sub === "save") {
-      const { flags } = parseFlags(rest);
-      const dealId = rest[0];
-      if (!dealId || !flags.file) {
-        throw new Error("Usage: llama memo save <dealId> --file <path>");
-      }
-      const { readFileSync } = await import("fs");
-      const html = readFileSync(String(flags.file), "utf-8");
-      if (!html.trim()) throw new Error(`File ${flags.file} is empty.`);
-      print(
-        await request(
-          "PUT",
-          `/api/deals/${encodeURIComponent(dealId)}/memo`,
-          { html }
-        )
-      );
-      return;
-    }
-
-    // reset — default drops only the manual override (next read returns
-    // the composed row, if any); --all drops every version for this deal.
-    if (sub === "reset") {
-      const dealId = rest[0];
-      if (!dealId) {
-        throw new Error("Usage: llama memo reset <dealId> [--all]");
-      }
-      const { flags } = parseFlags(rest.slice(1));
-      print(
-        await request(
-          "DELETE",
-          `/api/deals/${encodeURIComponent(dealId)}/memo`,
-          { scope: flags.all ? "all" : "override_only" }
-        )
-      );
-      return;
-    }
-
     throw new Error(
-      `Unknown memo subcommand "${sub || ""}". Use: show / regenerate / save / reset.`
+      `Unknown memo subcommand "${sub || ""}". Use: show. Memo generation is available only in Llama Command.`
     );
   }
 

package/contracts/core-api.json

@@ -1,9 +1,9 @@
 {
   "format": "llama.core-api-contract.v1",
   "name": "llama-core-api",
-  "apiVersion": "3.25.0",
+  "apiVersion": "3.33.0",
   "openapiVersion": "3.0.3",
-  "sha256": "f06bbd31d4e0e3fbf5f418a772616375f2a907535b0c7783060ba87b0565a0f7",
-  "pathCount": 235,
-  "operationCount": 306
+  "sha256": "d673c2f38f63be2cd92415d9c384b40d115165ca4ba11bfb93ddaf4036226eed",
+  "pathCount": 238,
+  "operationCount": 312
 }

package/contracts/required-operations.json

@@ -18,6 +18,10 @@
       "method": "GET",
       "path": "/api/admin/workflow-audit"
     },
+    {
+      "method": "POST",
+      "path": "/api/admin/workflow-remediation"
+    },
     {
       "method": "GET",
       "path": "/api/agent/activity"
@@ -82,14 +86,6 @@
       "method": "GET",
       "path": "/api/deals/{dealId}"
     },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/workflow"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/workflow"
-    },
     {
       "method": "POST",
       "path": "/api/deals/{dealId}/agent-runs/{runId}/revert"
@@ -230,22 +226,10 @@
       "method": "POST",
       "path": "/api/deals/{dealId}/links/{linkId}/restore"
     },
-    {
-      "method": "DELETE",
-      "path": "/api/deals/{dealId}/memo"
-    },
     {
       "method": "GET",
       "path": "/api/deals/{dealId}/memo"
     },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/memo"
-    },
-    {
-      "method": "PUT",
-      "path": "/api/deals/{dealId}/memo"
-    },
     {
       "method": "POST",
       "path": "/api/deals/{dealId}/posts"
@@ -274,6 +258,14 @@
       "method": "GET",
       "path": "/api/deals/{dealId}/timeline"
     },
+    {
+      "method": "GET",
+      "path": "/api/deals/{dealId}/workflow"
+    },
+    {
+      "method": "POST",
+      "path": "/api/deals/{dealId}/workflow"
+    },
     {
       "method": "POST",
       "path": "/api/external/chat"
@@ -350,6 +342,10 @@
       "method": "GET",
       "path": "/api/wiki/{slug}"
     },
+    {
+      "method": "POST",
+      "path": "/api/wiki/{slug}/file"
+    },
     {
       "method": "POST",
       "path": "/api/wiki/{slug}/restore"

package/lib/build-manifest.json

@@ -1,15 +1,15 @@
 {
   "format": "llama.cli-build.v1",
   "packageName": "@llamaventures/cli",
-  "packageVersion": "1.24.0",
-  "sourceSha": "501f361cc0aeaa8746e1387a11f6224ca66bca13",
+  "packageVersion": "1.26.0",
+  "sourceSha": "c330b8222f075478e50a96e160b647b09f535e3d",
   "sourceKind": "github",
   "sourceDirty": false,
   "coreApiContract": {
     "format": "llama.core-api-contract.v1",
     "name": "llama-core-api",
-    "apiVersion": "3.25.0",
+    "apiVersion": "3.33.0",
     "openapiVersion": "3.0.3",
-    "sha256": "f06bbd31d4e0e3fbf5f418a772616375f2a907535b0c7783060ba87b0565a0f7"
+    "sha256": "d673c2f38f63be2cd92415d9c384b40d115165ca4ba11bfb93ddaf4036226eed"
   }
 }

package/lib/workflow-remediation.mjs

@@ -0,0 +1,45 @@
+export const WORKFLOW_REMEDIATION_PATH = "/api/admin/workflow-remediation";
+export const WORKFLOW_REMEDIATION_GUARDS = [
+  "intake.founder_identity",
+  "intake.reason_why",
+];
+
+export function workflowRemediationBody(flags, requestId) {
+  const dealId = typeof flags.deal === "string" ? flags.deal.trim() : "";
+  const rawGuards = typeof flags.guard === "string" ? flags.guard : "";
+  const guardKeys = [...new Set(
+    rawGuards.split(",").map((value) => value.trim()).filter(Boolean),
+  )];
+  if (!dealId || guardKeys.length < 1 || guardKeys.length > 2 ||
+    guardKeys.some((key) => !WORKFLOW_REMEDIATION_GUARDS.includes(key))) {
+    throw new Error(
+      "Usage: llama admin workflow remediate --deal <uuid> " +
+      "--guard intake.reason_why[,intake.founder_identity] " +
+      "[--apply --expected-revision <n> --reason \"...\"]",
+    );
+  }
+
+  if (flags.apply !== true) {
+    if (flags["expected-revision"] !== undefined || flags.reason !== undefined) {
+      throw new Error("--expected-revision and --reason require --apply");
+    }
+    return { action: "preview", dealId, guardKeys };
+  }
+
+  const expectedRevision = Number(flags["expected-revision"]);
+  const reason = typeof flags.reason === "string" ? flags.reason.trim() : "";
+  if (!Number.isInteger(expectedRevision) || expectedRevision < 0 || !reason) {
+    throw new Error("--apply requires --expected-revision <n> from preview and --reason \"...\"");
+  }
+  if (typeof requestId !== "string" || !requestId) {
+    throw new Error("workflow remediation apply requires a request ID");
+  }
+  return {
+    action: "apply",
+    dealId,
+    guardKeys,
+    expectedRevision,
+    requestId,
+    reason,
+  };
+}

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@llamaventures/cli",
-  "version": "1.24.0",
+  "version": "1.26.0",
   "description": "CLI + MCP server for the Llama Ventures investment workbench (command.llamaventures.vc).",
   "type": "module",
   "scripts": {
     "test": "npm run test:agent-routing && npm run test:contract",
     "test:agent-routing": "node scripts/verify-agent-routing.mjs",
-    "test:contract": "node --test scripts/build-manifest.test.mjs scripts/core-api-call-sites.test.mjs scripts/investment-workflow-contract.test.mjs scripts/server-compatibility.test.mjs scripts/verify-core-api-contract.test.mjs scripts/workflow-audit.test.mjs && node scripts/verify-core-api-contract.mjs",
+    "test:contract": "node --test scripts/build-manifest.test.mjs scripts/core-api-call-sites.test.mjs scripts/investment-workflow-contract.test.mjs scripts/memo-retirement.test.mjs scripts/server-compatibility.test.mjs scripts/verify-core-api-contract.test.mjs scripts/workflow-audit.test.mjs scripts/workflow-remediation.test.mjs && node scripts/verify-core-api-contract.mjs",
     "verify:artifact": "node scripts/verify-release-artifact.mjs",
     "verify:release": "npm test && npm run verify:artifact && node scripts/verify-tarball-clean.mjs",
     "prepack": "node scripts/prepare-build-manifest.mjs",
@@ -56,7 +56,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "1.29.0",
+    "@modelcontextprotocol/sdk": "1.30.0",
     "@napi-rs/keyring": "^1.3.0",
     "zod": "^4.4.3"
   }