@llamaventures/cli 2.0.1 → 2.0.2

package/AGENT_BRIEFING.md

@@ -4,6 +4,28 @@ This package is the authenticated tool boundary for Llama Command. For Deal
 work, the interface is intentionally small: search, read, create, and write.
 Do not bypass it with SQL, Google APIs, or retired HTTP routes.
 
+## Mandatory live bootstrap
+
+Before any Llama workflow, run:
+
+```bash
+llama agent bootstrap
+```
+
+The authenticated response contains the current private Llama Brain with
+exactly two components: the approved Investment Framework V3 Markdown (how to
+think) and the Llama Command operating skill (how to work). Beside Brain it
+contains the separate current Live Deal Page field contract (what every visible
+slot means and how to verify a good write). The public CLI intentionally bundles
+none of this private content; it only fetches it after authentication.
+
+CLI is the Agent's tool, not Brain. Do not substitute a private skill wrapper
+for either canonical Brain component.
+
+Do not assume the Page is only `description` plus `notes`, and do not infer its
+schema from a previous session. If bootstrap fails, repair authentication or
+upgrade the CLI before writing; do not guess the fields.
+
 ## The Deal model
 
 Each company has five business resources:
@@ -17,6 +39,21 @@ Each company has five business resources:
 Archive, trash, status, founder, opinion, fact, memo section, and artifact kind
 are data or labels inside these resources. They are not separate tools.
 
+Information and Page are deliberately different. Information is traceable
+working memory; it never becomes Page automatically. Page is the bounded,
+human-visible current projection, so patch the exact semantic fields described
+by the live contract instead of hiding structured analysis in `notes`.
+
+Every Page content field is Agent-writable. A field's `author` or
+`semanticOwner` describes attribution, not permission. Preserve a real human
+judgment with its author; otherwise label the value as an Agent proposal / 待人确认.
+
+`page.patch` uses JSON Merge Patch: objects merge, `null` deletes, and arrays
+replace the entire array. Before changing one `whatTheyDo`, `peopleSteps`,
+`foundersJson`, or `industryMaps` item, read the current Page, preserve every
+sibling item, and submit the complete updated array. The live field contract
+includes the exact payload path and write mode for all 61 semantic fields.
+
 ## Exactly four Deal actions
 
 ```bash

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## [2.0.2] - 2026-08-31
+
+- Correct the authenticated runtime model: Brain has exactly two private
+  components, Investment Framework V3 and the Llama Command operating skill.
+- Load the complete Live Deal Page field prompts beside Brain as a separate
+  current CLI/MCP tool contract.
+- Keep all Brain and Page prompt bytes server-owned and out of the public npm
+  artifact.
+
 ## [2.0.1] - 2026-08-30
 
 - Ship the four-action Occam Deal surface from the audited cleanup commit.
@@ -30,6 +39,14 @@ this project adheres to [Semantic Versioning](https://semver.org).
 
 ## [Unreleased]
 
+### Changed
+- Make the authenticated live bootstrap mandatory before Deal work and clarify
+  that it loads the server-owned two-part private Brain plus the separate Live
+  Deal Page field contract. CLI remains only the tool/transport layer.
+- Teach CLI and MCP Agents that Information never updates Page automatically,
+  every Page content field is Agent-writable, and field authorship controls
+  attribution rather than permission.
+
 ## [1.26.0] - 2026-08-11
 
 ### Added

package/README.md

@@ -158,6 +158,13 @@ llama skills search "<task>"
 llama skills show <slug>
 ```
 
+Agents should run `llama agent bootstrap` before Deal work. The command loads
+the authenticated, server-owned private Brain: Investment Framework V3 for
+thinking plus the Llama Command operating skill for working. It also loads the
+separate current Live Deal Page field contract for writing. None of that private
+content is shipped in this public package; CLI is only the tool and authenticated
+transport.
+
 The live server briefing is authoritative. The bundled
 `AGENT_BRIEFING.md` is an offline fallback with the same four-action contract.
 

package/README.zh-CN.md

@@ -151,6 +151,12 @@ llama skills search "<任务>"
 llama skills show <slug>
 ```
 
+Agent 在处理 Deal 前应先运行 `llama agent bootstrap`。该命令会从鉴权后的
+Llama Command 服务端加载两部分私有 Brain：负责投资思考的 Investment
+Framework V3，以及负责如何在 Command 工作的 Llama Command operating skill；
+同时加载独立的、实时的 Live Deal Page 字段契约。所有私有内容都不会进入公开
+npm 包；CLI 只是 Agent 的工具和鉴权运输层。
+
 服务端实时 briefing 是权威合同；包内 `AGENT_BRIEFING.md` 是相同四动作
 合同的离线兜底。
 

package/bin/llama-mcp.mjs

@@ -70,7 +70,7 @@ server.registerTool(
 server.registerTool(
   "read_deal",
   {
-    description: "Read one Deal. Live Page is always returned; expand only the resource needed.",
+    description: "Read one Deal. Live Page and its current private field contract are always returned; Information is memory and never updates Page automatically.",
     inputSchema: {
       dealId: z.string().min(1),
       detail: z.enum(["overview", "memory", "files", "conversation", "history", "all"]).optional(),
@@ -99,7 +99,7 @@ server.registerTool(
 server.registerTool(
   "write_deal",
   {
-    description: "The only Deal mutation tool: input.submit, information.put, page.patch, or artifact.put. Human-visible Page prose uses one value with both en and zh.",
+    description: "The only Deal mutation tool: input.submit, information.put, page.patch, or artifact.put. All Page content fields are Agent-writable; author controls attribution, not permission. Use the read/bootstrap field contract and bilingual Page prose. page.patch is JSON Merge Patch: arrays replace whole arrays, so read-modify-write and preserve sibling slots.",
     inputSchema: {
       operation: z.enum(["input.submit", "information.put", "page.patch", "artifact.put"]),
       dealId: z.string().uuid(),
@@ -152,7 +152,7 @@ server.registerTool(
 server.registerTool(
   "agent_bootstrap",
   {
-    description: "Fetch the authenticated runtime contract and visible Llama OS skills.",
+    description: "Mandatory before Llama work: fetch the authenticated two-part private Brain (Investment Framework V3 + Llama Command operating skill), the separate current Live Deal Page field contract, runtime contract, and visible Llama OS skills.",
     inputSchema: { limit: z.number().int().min(1).max(100).optional() },
   },
   async ({ limit } = {}) => {
@@ -361,7 +361,7 @@ server.registerTool(
 server.registerPrompt(
   "agent_briefing",
   {
-    description: "Fetch the authenticated current agent contract; bundled text is only an offline fallback.",
+    description: "Mandatory before Llama work: fetch the authenticated two-part private Brain, the separate current Live Deal Page field contract, and runtime contract; bundled text is only an offline fallback.",
   },
   async () => {
     const headers = await getAuthHeaders();

package/bin/llama.mjs

@@ -69,6 +69,16 @@ Exactly four actions:
   llama deal create --json <file|->
   llama deal write --json <file|->
 
+Before any Page write:
+  llama agent bootstrap
+
+The authenticated bootstrap contains the two-part private Llama Brain:
+Investment Framework V3 plus the Llama Command operating skill. It also
+contains the separate current 61-field Page contract. CLI is the tool, not
+Brain. Information never updates Page automatically. page.patch is JSON
+Merge Patch: objects merge, null deletes, and arrays replace whole arrays, so
+read-modify-write complete Page arrays and preserve sibling slots.
+
 create JSON:
   {"companyName":"Acme","page":{},"information":[],"origin":{"kind":"user","originalUserUtterance":"..."}}
 

package/lib/build-manifest.json

@@ -1,8 +1,8 @@
 {
   "format": "llama.cli-build.v1",
   "packageName": "@llamaventures/cli",
-  "packageVersion": "2.0.1",
-  "sourceSha": "ac71158a0bd630d602012e5750be8c1babb93f2d",
+  "packageVersion": "2.0.2",
+  "sourceSha": "dc52c43363b050072c70f45144909d93b4f42028",
   "sourceKind": "github",
   "sourceDirty": false,
   "coreApiContract": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@llamaventures/cli",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "description": "CLI + MCP server for the Llama Ventures investment workbench (command.llamaventures.vc).",
   "type": "module",
   "scripts": {