@llamaventures/cli 1.26.0 → 2.0.1

package/contracts/core-api.json

@@ -1,9 +1,9 @@
 {
   "format": "llama.core-api-contract.v1",
   "name": "llama-core-api",
-  "apiVersion": "3.33.0",
+  "apiVersion": "5.0.0",
   "openapiVersion": "3.0.3",
-  "sha256": "d673c2f38f63be2cd92415d9c384b40d115165ca4ba11bfb93ddaf4036226eed",
-  "pathCount": 238,
-  "operationCount": 312
+  "sha256": "c48ed580f9930b06445f62b94959a2ca4bf9780e59473f17588e1e6554914014",
+  "pathCount": 110,
+  "operationCount": 136
 }

package/contracts/required-operations.json

@@ -2,353 +2,32 @@
   "format": "llama.cli-core-api-operations.v1",
   "coreApiContract": "contracts/core-api.json",
   "requiredOperations": [
-    {
-      "method": "GET",
-      "path": "/api/admin/agent-events"
-    },
-    {
-      "method": "GET",
-      "path": "/api/admin/auth-events"
-    },
-    {
-      "method": "GET",
-      "path": "/api/admin/deal-events"
-    },
-    {
-      "method": "GET",
-      "path": "/api/admin/workflow-audit"
-    },
-    {
-      "method": "POST",
-      "path": "/api/admin/workflow-remediation"
-    },
-    {
-      "method": "GET",
-      "path": "/api/agent/activity"
-    },
-    {
-      "method": "GET",
-      "path": "/api/agent/briefing"
-    },
-    {
-      "method": "POST",
-      "path": "/api/agent/client-events"
-    },
-    {
-      "method": "GET",
-      "path": "/api/agent/explain"
-    },
-    {
-      "method": "GET",
-      "path": "/api/agent/manifest"
-    },
-    {
-      "method": "GET",
-      "path": "/api/agent/preferences"
-    },
-    {
-      "method": "POST",
-      "path": "/api/agent/preferences"
-    },
-    {
-      "method": "PATCH",
-      "path": "/api/agent/preferences/{id}"
-    },
-    {
-      "method": "GET",
-      "path": "/api/agent/skills"
-    },
-    {
-      "method": "GET",
-      "path": "/api/agent/skills/{slug}"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/create"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/deleted"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/update"
-    },
-    {
-      "method": "DELETE",
-      "path": "/api/deals/{dealId}"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/agent-runs/{runId}/revert"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/blocks"
-    },
-    {
-      "method": "PUT",
-      "path": "/api/deals/{dealId}/blocks"
-    },
-    {
-      "method": "DELETE",
-      "path": "/api/deals/{dealId}/blocks/{blockId}"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/blocks/{blockId}"
-    },
-    {
-      "method": "PATCH",
-      "path": "/api/deals/{dealId}/blocks/{blockId}"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/blocks/{blockId}/history"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/blocks/{blockId}/history"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/blocks/{blockId}/restore"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/collaborators"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/collaborators"
-    },
-    {
-      "method": "DELETE",
-      "path": "/api/deals/{dealId}/collaborators/{userId}"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/collaborators/{userId}/restore"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/command-center"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/documents"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/documents"
-    },
-    {
-      "method": "DELETE",
-      "path": "/api/deals/{dealId}/documents/{slug}"
-    },
-    {
-      "method": "PATCH",
-      "path": "/api/deals/{dealId}/documents/{slug}"
-    },
-    {
-      "method": "DELETE",
-      "path": "/api/deals/{dealId}/documents/{slug}/html"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/documents/{slug}/html"
-    },
-    {
-      "method": "PUT",
-      "path": "/api/deals/{dealId}/documents/{slug}/html"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/documents/{slug}/html/history"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/documents/{slug}/html/restore/{version}"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/enrich"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/facts"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/facts"
-    },
-    {
-      "method": "PATCH",
-      "path": "/api/deals/{dealId}/facts/{factId}"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/facts/{factId}/uncontest"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/feed"
-    },
-    {
-      "method": "PUT",
-      "path": "/api/deals/{dealId}/founders"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/ingest"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/links"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/links"
-    },
-    {
-      "method": "DELETE",
-      "path": "/api/deals/{dealId}/links/{linkId}"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/links/{linkId}/restore"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/memo"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/posts"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/propose-owner"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/refresh-brief"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/restore"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/threads"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/threads/{threadId}"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/timeline"
-    },
-    {
-      "method": "GET",
-      "path": "/api/deals/{dealId}/workflow"
-    },
-    {
-      "method": "POST",
-      "path": "/api/deals/{dealId}/workflow"
-    },
-    {
-      "method": "POST",
-      "path": "/api/external/chat"
-    },
-    {
-      "method": "POST",
-      "path": "/api/external/start-session"
-    },
-    {
-      "method": "POST",
-      "path": "/api/external/upload"
-    },
-    {
-      "method": "GET",
-      "path": "/api/me"
-    },
-    {
-      "method": "GET",
-      "path": "/api/me/nominations"
-    },
-    {
-      "method": "GET",
-      "path": "/api/mentions"
-    },
-    {
-      "method": "GET",
-      "path": "/api/mentions/unread-count"
-    },
-    {
-      "method": "POST",
-      "path": "/api/mentions/{id}/resolve"
-    },
-    {
-      "method": "POST",
-      "path": "/api/nominations/{approvalId}"
-    },
-    {
-      "method": "GET",
-      "path": "/api/oauth/authorize"
-    },
-    {
-      "method": "POST",
-      "path": "/api/oauth/revoke"
-    },
-    {
-      "method": "POST",
-      "path": "/api/oauth/token"
-    },
-    {
-      "method": "GET",
-      "path": "/api/partner/approvals"
-    },
-    {
-      "method": "POST",
-      "path": "/api/partner/approvals"
-    },
-    {
-      "method": "GET",
-      "path": "/api/users"
-    },
-    {
-      "method": "POST",
-      "path": "/api/wiki/save"
-    },
-    {
-      "method": "GET",
-      "path": "/api/wiki/search"
-    },
-    {
-      "method": "DELETE",
-      "path": "/api/wiki/{slug}"
-    },
-    {
-      "method": "GET",
-      "path": "/api/wiki/{slug}"
-    },
-    {
-      "method": "POST",
-      "path": "/api/wiki/{slug}/file"
-    },
-    {
-      "method": "POST",
-      "path": "/api/wiki/{slug}/restore"
-    }
+    { "method": "DELETE", "path": "/api/wiki/{slug}" },
+    { "method": "GET", "path": "/api/admin/agent-events" },
+    { "method": "GET", "path": "/api/admin/auth-events" },
+    { "method": "GET", "path": "/api/admin/deal-events" },
+    { "method": "GET", "path": "/api/agent/briefing" },
+    { "method": "GET", "path": "/api/agent/explain" },
+    { "method": "GET", "path": "/api/agent/manifest" },
+    { "method": "GET", "path": "/api/agent/preferences" },
+    { "method": "GET", "path": "/api/agent/skills" },
+    { "method": "GET", "path": "/api/agent/skills/{slug}" },
+    { "method": "GET", "path": "/api/me" },
+    { "method": "GET", "path": "/api/oauth/authorize" },
+    { "method": "GET", "path": "/api/occam/deals" },
+    { "method": "GET", "path": "/api/occam/deals/{dealId}" },
+    { "method": "GET", "path": "/api/wiki/{slug}" },
+    { "method": "GET", "path": "/api/wiki/search" },
+    { "method": "PATCH", "path": "/api/agent/preferences/{id}" },
+    { "method": "POST", "path": "/api/agent/client-events" },
+    { "method": "POST", "path": "/api/agent/preferences" },
+    { "method": "POST", "path": "/api/external/chat" },
+    { "method": "POST", "path": "/api/external/start-session" },
+    { "method": "POST", "path": "/api/external/upload" },
+    { "method": "POST", "path": "/api/oauth/revoke" },
+    { "method": "POST", "path": "/api/oauth/token" },
+    { "method": "POST", "path": "/api/occam/deals/commands" },
+    { "method": "POST", "path": "/api/wiki/{slug}/restore" },
+    { "method": "POST", "path": "/api/wiki/save" }
   ]
 }

package/lib/build-manifest.json

@@ -1,15 +1,15 @@
 {
   "format": "llama.cli-build.v1",
   "packageName": "@llamaventures/cli",
-  "packageVersion": "1.26.0",
-  "sourceSha": "c330b8222f075478e50a96e160b647b09f535e3d",
+  "packageVersion": "2.0.1",
+  "sourceSha": "ac71158a0bd630d602012e5750be8c1babb93f2d",
   "sourceKind": "github",
   "sourceDirty": false,
   "coreApiContract": {
     "format": "llama.core-api-contract.v1",
     "name": "llama-core-api",
-    "apiVersion": "3.33.0",
+    "apiVersion": "5.0.0",
     "openapiVersion": "3.0.3",
-    "sha256": "d673c2f38f63be2cd92415d9c384b40d115165ca4ba11bfb93ddaf4036226eed"
+    "sha256": "c48ed580f9930b06445f62b94959a2ca4bf9780e59473f17588e1e6554914014"
   }
 }

package/lib/client.mjs

@@ -59,11 +59,11 @@ export function getPackageVersion() {
   return packageVersionCache;
 }
 
-// Canonical entrypoint. `llama-command.onrender.com` also serves the API
-// but its NextAuth callback URL doesn't match, so browser login (needed
-// to mint a token at /settings/tokens) fails there with a server-config
-// error. Always default to canonical — override with $LLAMA_API_URL only
-// if testing.
+// Canonical entrypoint. The hosting provider's assigned hostname also
+// serves the API, but its NextAuth callback URL doesn't match, so browser
+// login (needed to mint a token at /settings/tokens) fails there with a
+// server-config error. Always default to canonical — override with
+// $LLAMA_API_URL only if testing.
 export const DEFAULT_BASE_URL = "https://command.llamaventures.vc";
 
 // Canonical token location (single line, mode 0600). Aligns with the
@@ -212,6 +212,7 @@ function agentClientHeaders(command) {
   return {
     "X-Llama-Client": runtimeClient,
     "X-Llama-Client-Version": getPackageVersion(),
+    "X-Llama-Client-Capabilities": "core.read.v1,occam.deal.v1",
     "X-Llama-Client-Source-Sha": build.sourceSha,
     "X-Llama-API-Contract-Version": build.coreApiContract.apiVersion,
     "X-Llama-API-Contract-Digest": build.coreApiContract.sha256,
@@ -290,16 +291,9 @@ function inferCommand(method, endpoint) {
   if (pathname === "/api/wiki/search") return "wiki.search";
   if (pathname === "/api/wiki/save") return "wiki.save";
   if (/^\/api\/wiki\/[^/]+$/.test(pathname)) return verb === "GET" ? "wiki.read" : "wiki.write";
-  if (pathname === "/api/deals") return verb === "GET" ? "deal.search" : "deal.write";
-  if (pathname === "/api/deals/create") return "deal.create";
-  if (pathname === "/api/deals/update") return "deal.update";
-  if (/^\/api\/deals\/[^/]+\/ingest$/.test(pathname)) return "deal.ingest";
-  if (/^\/api\/deals\/[^/]+\/threads\/[^/]+$/.test(pathname)) return "deal.agent.run";
-  if (/^\/api\/deals\/[^/]+\/threads$/.test(pathname)) return "deal.thread.create";
-  if (/^\/api\/deals\/[^/]+\/facts/.test(pathname)) return verb === "GET" ? "deal.fact.list" : "deal.fact.write";
-  if (/^\/api\/deals\/[^/]+\/posts$/.test(pathname)) return "deal.post";
-  if (/^\/api\/deals\/[^/]+\/blocks/.test(pathname)) return verb === "GET" ? "brief.blocks" : "brief.write";
-  if (/^\/api\/deals\/[^/]+$/.test(pathname)) return verb === "GET" ? "deal.show" : "deal.write";
+  if (pathname === "/api/occam/deals") return "deal.search";
+  if (pathname === "/api/occam/deals/commands") return "deal.write";
+  if (/^\/api\/occam\/deals\/[^/]+$/.test(pathname)) return "deal.read";
   if (pathname === "/api/me") return "auth.status";
   if (pathname.startsWith("/api/agent/skills")) return "skills.read";
   if (pathname === "/api/agent/manifest") return "agent.bootstrap";
@@ -536,12 +530,14 @@ function apiResponseError(data, status) {
     );
     error.code = data.code;
     error.details = data;
+    error.status = status;
     return error;
   }
   if (data?.code !== "MENTION_APPROVAL_REQUIRED") {
     const error = new Error(message);
     if (typeof data?.code === "string") error.code = data.code;
     error.details = data;
+    error.status = status;
     return error;
   }
   const recipients = Array.isArray(data?.cue?.recipients)
@@ -563,6 +559,7 @@ function apiResponseError(data, status) {
   );
   error.code = data.code;
   error.details = data;
+  error.status = status;
   return error;
 }
 

package/lib/deal-actions.mjs

@@ -0,0 +1,193 @@
+import { createHash } from "node:crypto";
+import { readFile } from "node:fs/promises";
+
+export const DEAL_ACTIONS = Object.freeze(["search", "read", "create", "write"]);
+export const DEAL_WRITE_OPERATIONS = Object.freeze([
+  "input.submit",
+  "information.put",
+  "page.patch",
+  "artifact.put",
+]);
+
+function canonicalJson(value) {
+  if (Array.isArray(value)) return `[${value.map(canonicalJson).join(",")}]`;
+  if (value && typeof value === "object") {
+    return `{${Object.keys(value)
+      .sort()
+      .map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`)
+      .join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+
+export function ensureIdempotencyKey(command) {
+  if (typeof command?.idempotencyKey === "string" && command.idempotencyKey.trim()) {
+    return command;
+  }
+  const digest = createHash("sha256").update(canonicalJson(command)).digest("hex").slice(0, 40);
+  return { ...command, idempotencyKey: `cli:${digest}` };
+}
+
+export function validateCommandOrigin(command) {
+  const origin = command?.origin;
+  if (!origin || !["user", "agent", "system"].includes(origin.kind)) {
+    throw new Error("Mutation JSON must include origin.kind: user, agent, or system");
+  }
+  if (
+    origin.kind === "user" &&
+    !(typeof origin.originalUserUtterance === "string" && origin.originalUserUtterance.trim()) &&
+    !(typeof origin.originatingChatRecordId === "string" && origin.originatingChatRecordId.trim())
+  ) {
+    throw new Error(
+      "User-originated mutation JSON must preserve origin.originalUserUtterance or origin.originatingChatRecordId",
+    );
+  }
+  return command;
+}
+
+function validateLocalizedTextPairs(value, path = "page") {
+  if (Array.isArray(value)) {
+    value.forEach((item, index) => validateLocalizedTextPairs(item, `${path}[${index}]`));
+    return;
+  }
+  if (!value || typeof value !== "object") return;
+  const hasEnglish = Object.prototype.hasOwnProperty.call(value, "en");
+  const hasChinese = Object.prototype.hasOwnProperty.call(value, "zh");
+  if (hasEnglish || hasChinese) {
+    if (
+      Object.keys(value).some((key) => key !== "en" && key !== "zh") ||
+      typeof value.en !== "string" ||
+      !value.en.trim() ||
+      typeof value.zh !== "string" ||
+      !value.zh.trim()
+    ) {
+      throw new Error(
+        `${path} localized text must contain only non-empty en and zh values`,
+      );
+    }
+    return;
+  }
+  for (const [key, child] of Object.entries(value)) {
+    validateLocalizedTextPairs(child, `${path}.${key}`);
+  }
+}
+
+const LANGUAGE_NEUTRAL_PAGE_KEYS = new Set([
+  "companyName", "companyKey", "state", "pipelineStatus", "stage",
+  "theirStage", "ownerUserId", "sourceUserId", "website", "dealOwner",
+  "source", "sourceDirection", "proposedAmount", "roundSize", "valuation",
+  "founders", "deckLink", "location", "foundedYear", "leadInvestor",
+  "dateAdded", "tab", "sourcePerson", "createdByName", "createdByLabel",
+  "createdVia", "id", "name", "key", "slug", "url", "href", "email",
+  "linkedin", "handle", "status", "kind", "type", "tier", "confidence",
+  "currency", "unit", "format", "mimeType", "sha256", "timestamp",
+  "date", "year",
+]);
+const LANGUAGE_NEUTRAL_PAGE_CONTAINERS = new Set([
+  "manualTags", "investors", "founderEmails", "labels", "tags",
+]);
+const OPAQUE_PAGE_CONTAINERS = new Set([
+  "migration", "extra", "fieldProvenance",
+]);
+
+function pathKeys(path) {
+  return path.match(/[^.[\]]+/g)?.filter((part) => !/^\d+$/u.test(part)) ?? [];
+}
+
+function isLanguageNeutralPagePath(path) {
+  const keys = pathKeys(path);
+  if (keys.some((key) => OPAQUE_PAGE_CONTAINERS.has(key))) return true;
+  if (keys.some((key) => LANGUAGE_NEUTRAL_PAGE_CONTAINERS.has(key))) return true;
+  const key = keys.at(-1) ?? "";
+  if (LANGUAGE_NEUTRAL_PAGE_KEYS.has(key)) return true;
+  return /(?:Id|Ids|URL|Url|URI|Uri|Link|Email|Emails|At|Date|Year|Key|Slug|Hash)$/u.test(key);
+}
+
+function validateAgentAuthoredPageProse(value, path = "page") {
+  if (typeof value === "string") {
+    if (!isLanguageNeutralPagePath(path)) {
+      throw new Error(
+        `${path} agent-authored prose must be one value with non-empty en and zh`,
+      );
+    }
+    return;
+  }
+  if (Array.isArray(value)) {
+    value.forEach((item, index) => validateAgentAuthoredPageProse(item, `${path}[${index}]`));
+    return;
+  }
+  if (!value || typeof value !== "object") return;
+  if (
+    Object.prototype.hasOwnProperty.call(value, "en") ||
+    Object.prototype.hasOwnProperty.call(value, "zh")
+  ) {
+    return;
+  }
+  for (const [key, child] of Object.entries(value)) {
+    validateAgentAuthoredPageProse(child, `${path}.${key}`);
+  }
+}
+
+export async function readJsonInput(path, stdin = process.stdin) {
+  if (!path || path === true) throw new Error("--json <file|-> is required");
+  const text = path === "-"
+    ? await new Promise((resolve, reject) => {
+        let value = "";
+        stdin.setEncoding("utf8");
+        stdin.on("data", (chunk) => { value += chunk; });
+        stdin.on("end", () => resolve(value));
+        stdin.on("error", reject);
+      })
+    : await readFile(path, "utf8");
+  try {
+    return JSON.parse(text);
+  } catch (error) {
+    throw new Error(`Invalid JSON from ${path}: ${error instanceof Error ? error.message : String(error)}`);
+  }
+}
+
+export function buildDealSearchPath(query, flags = {}) {
+  const params = new URLSearchParams();
+  if (query) params.set("q", query);
+  if (flags.state && flags.state !== true) params.set("state", String(flags.state));
+  if (flags.limit && flags.limit !== true) params.set("limit", String(flags.limit));
+  return `/api/occam/deals${params.size ? `?${params}` : ""}`;
+}
+
+export function buildDealReadPath(dealId, detail = "overview") {
+  if (!dealId || dealId.startsWith("--")) {
+    throw new Error("Usage: llama deal read <dealId> [--detail overview|memory|files|conversation|history|all]");
+  }
+  const expansion = {
+    overview: "",
+    memory: "information",
+    files: "artifacts",
+    conversation: "chat",
+    history: "feed",
+    all: "information,artifacts,chat,feed",
+  }[detail];
+  if (expansion === undefined) throw new Error(`Unknown detail: ${detail}`);
+  return `/api/occam/deals/${encodeURIComponent(dealId)}${expansion ? `?expand=${expansion}` : ""}`;
+}
+
+export function prepareDealCommand(action, input) {
+  if (!input || typeof input !== "object" || Array.isArray(input)) {
+    throw new Error("Mutation JSON must be an object");
+  }
+  const command = action === "create" ? { operation: "deal.create", ...input } : input;
+  if (action === "create" && command.operation !== "deal.create") {
+    throw new Error("create JSON must describe one deal.create intent");
+  }
+  if (action === "write" && !DEAL_WRITE_OPERATIONS.includes(command.operation)) {
+    throw new Error(`write JSON operation must be ${DEAL_WRITE_OPERATIONS.join(", ")}`);
+  }
+  if (action === "create") {
+    validateLocalizedTextPairs(command.page ?? {});
+    validateAgentAuthoredPageProse(command.page ?? {});
+  }
+  if (action === "write" && command.operation === "page.patch") {
+    validateLocalizedTextPairs(command.patch ?? {});
+    validateAgentAuthoredPageProse(command.patch ?? {});
+  }
+  return ensureIdempotencyKey(validateCommandOrigin(command));
+}