@llamaventures/cli 1.3.0 → 1.3.1

package/AGENT_BRIEFING.md

@@ -139,7 +139,6 @@ Tools available:
 - `timeline` / `post`
 - `mentions_list`
 - `pitch_start` / `pitch_send_message` / `pitch_upload_file` / `pitch_status` / `pitch_finalize` — public intake (no Llama token needed; for founders / EAs / external agents)
-- `llama_api` — escape hatch for any endpoint not yet wrapped (path must start `/api/`)
 
 You can also fetch this exact briefing as an MCP prompt named `agent_briefing`.
 

package/README.md

@@ -342,9 +342,8 @@ llama pitch upload ./deck.pdf
 llama pitch                       # interactive REPL
 ```
 
-Server-enforced caps (same as the web flow): 5 sessions/IP/day,
-3 sessions/email/day, 30 min idle timeout, 100 messages/session,
-1 M tokens/session.
+Server-enforced rate limits apply (per-IP, per-email, per-session). If you
+hit a limit, the CLI surfaces the server's response message.
 
 This is genuine **agent-to-agent**: your AI helps you tell the story, our
 intake agent extracts the structured fields and produces the verdict.

package/bin/llama-mcp.mjs

@@ -364,9 +364,8 @@ server.registerTool(
 // founder's agent talks to ours, structured intake gets captured, and a
 // 12-dimension verdict is returned.
 //
-// Anti-abuse caps are server-enforced (5 sessions/IP/day, 3/email/day,
-// 30min idle, 100 msg cap, 1M token cap, global daily cap). The MCP tools
-// surface those rejections as text back to the agent.
+// Anti-abuse rate limits are server-enforced. The MCP tools surface
+// any server-side rejections as text back to the agent.
 
 function asTextResult(text, isError = false) {
   return {
@@ -383,8 +382,8 @@ server.registerTool(
       "when a founder (the user) wants to pitch their company to Llama. " +
       "Requires their name + email. Returns a session_id; the conversation " +
       "is then maintained via pitch_send_message until the agent finalizes. " +
-      "Caps (server-enforced): 5 sessions/IP/day, 3 sessions/email/day, " +
-      "30min idle timeout. No Llama Command token needed.",
+      "Server-enforced rate limits apply (per-IP, per-email, per-session). " +
+      "No Llama Command token needed.",
     inputSchema: {
       name: z.string().describe("the founder's full name (max 100 chars)"),
       email: z.string().describe("the founder's email (deliverable, not a disposable domain)"),
@@ -447,8 +446,9 @@ server.registerTool(
     description:
       "Attach a file (deck, one-pager, deck PDF, screenshot, etc.) to the " +
       "active pitch session. Server allows pdf / pptx / ppt / docx / doc / " +
-      "xlsx / xls / png / jpg / webp / heic / heif / txt / md, max 50 MB, " +
-      "10 files per session. Returns a drive_file_id; the intake agent will " +
+      "xlsx / xls / png / jpg / webp / heic / heif / txt / md, with " +
+      "server-enforced size and per-session count limits. " +
+      "Returns a drive_file_id; the intake agent will " +
       "pick the file up via list_uploaded_files / read_uploaded_file on its " +
       "next turn (so call pitch_send_message with a one-line note like " +
       "'I just uploaded our pitch deck' so the agent knows to look).",
@@ -493,7 +493,7 @@ server.registerTool(
       "server-side intake agent to finalize — the agent decides that on its " +
       "own once the pitch is sufficient. Use this for cleanup after a session " +
       "ends, or to abandon a session early. The server-side session will " +
-      "naturally expire after 30min of idle.",
+      "naturally expire after the server's idle timeout.",
     inputSchema: {},
   },
   async () => {
@@ -505,7 +505,7 @@ server.registerTool(
           {
             cleared: before.active,
             previous_session: before.active ? before : null,
-            note: "Local pitch session state cleared. Server-side session may still be active for ~30min until idle timeout.",
+            note: "Local pitch session state cleared. Server-side session may still be active until its idle timeout.",
           },
           null,
           2

package/bin/llama.mjs

@@ -242,7 +242,7 @@ Skill corrections (persona-owner pushback — read by persona-watcher):
   llama skill-correction add <skill-slug> "<correction text>" [--deal <uuid>] [--block <blockId>]
   llama skill-correction delete <id>
   Server enforces persona owner OR system admin on POST/DELETE; GET is open.
-  External personas (owner_email=null, e.g. virtual-liu-yi) are admin-only for write.
+  External personas (owner_email=null) are admin-only for write.
 
 Mentions / Inbox:
   llama mentions                                       # default: my unresolved cues
@@ -318,9 +318,9 @@ Inspect / clean up:
   llama pitch status         # session id, idle minutes, finalized?
   llama pitch end            # clear local session state
 
-Caps (server-enforced):
-  5 sessions per IP per day, 3 per email per day, 60min idle timeout,
-  100 messages per session, 1M tokens per session.
+Caps:
+  Server-enforced per-IP / per-email / per-session rate limits apply.
+  The CLI surfaces server messages if a limit is hit.
 
 Environment:
   LLAMA_API_URL              override base URL (dev: http://localhost:3000)
@@ -411,7 +411,7 @@ Environment:
       cleared: !!had,
       session_file: EXTERNAL_SESSION_FILE,
       note: had
-        ? "Local session state cleared. Server-side session may still be active until idle timeout (60min)."
+        ? "Local session state cleared. Server-side session may still be active until idle timeout."
         : "No local session was active.",
     });
     return;

package/lib/external.mjs

@@ -18,14 +18,11 @@ import { getBaseUrl } from "./client.mjs";
 const SESSION_DIR = path.join(os.homedir(), ".llama");
 const SESSION_FILE = path.join(SESSION_DIR, "external-session.json");
 
-// Server-side proof-of-work prefix. Must agree with
-// llama-command/src/lib/external-pow-client.ts. ~65k iterations average on
-// commodity hardware (~50–500ms in node).
+// Server-side proof-of-work prefix. Server-validated; tune in tandem
+// with the server policy if changed.
 const POW_DIFFICULTY_PREFIX = "0000";
 
-// Server requires ts_rendered to be at least 3s old (anti-replay). We
-// backdate by 4s when computing PoW so the request lands inside the
-// validity window without waiting.
+// Backdate offset for the rendered-at timestamp passed to the server.
 const POW_BACKDATE_MS = 4_000;
 
 // ============================================================
@@ -360,13 +357,13 @@ export async function uploadExternalFile(filePath) {
 
   if (!res.ok) {
     if (res.status === 413) {
-      throw new Error("File too large (max 50 MB).");
+      throw new Error("File too large.");
     }
     if (res.status === 415) {
       throw new Error(`MIME type "${mimetype}" not in server allowlist.`);
     }
     if (res.status === 429) {
-      throw new Error("Upload cap reached (10 files per session).");
+      throw new Error("Upload cap reached.");
     }
     if (res.status === 401 || res.status === 403) {
       throw new Error(

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@llamaventures/cli",
-  "version": "1.3.0",
-  "description": "Llama Ventures CLI + MCP server. Internal team tool for command.llamaventures.vc.",
+  "version": "1.3.1",
+  "description": "CLI + MCP server for the Llama Ventures investment workbench (command.llamaventures.vc).",
   "type": "module",
   "bin": {
     "llama": "bin/llama.mjs",