@llamaventures/cli 2.6.0 → 2.8.0

package/AGENT_BRIEFING.md

@@ -93,6 +93,8 @@ Before researching or creating a company:
 1. `llama deal search "<company, founder or topic>"`. Core API 5.41.0+ also searches descriptions and sector/subsector in either stored language. Use `--sector "robotics"` alone or combine it with a query and `--state`/`--limit`; filters apply before the limit. These are literal substrings, not semantic synonyms. A sector filter requires server confirmation; never treat an older unfiltered response as sector-filtered results.
    Use short keywords. Inspect `searchMatch` fields and `search.has_more`; truncated results are not exhaustive. On zero matches, broaden the sector or wording. Current Page updates are immediately searchable without manual index or tag maintenance.
 2. Read the best candidate with `--detail overview` and verify its specific category; a broad sector match does not establish a narrower classification.
+   For "which Deals are invested / in diligence / latest investments", never guess from names: run `llama deal search --status Invested --limit 200` (Core API 5.42.0+) and order by `investmentDate`/`markedInvestedAt`, stating how many Deals you checked.
+   To answer from Information, prefer a targeted read over `--detail memory` (Core API 5.42.0+): `--information-q "<text>"` for snippets, `--information-type <type>` for one kind of record, and `--information-id <id>` for full values. Values over 8,000 characters in text/type reads are omitted; read that id. Never treat an unconfirmed (older server) response as filtered.
 3. Expand only the resource needed for the task.
 4. Create only when no existing company matches.
 
@@ -252,6 +254,17 @@ request, and verify the exact Artifact version and hash through Command.
   separate domains. Deal Memory is also separate. None expands the four-action
   Occam Deal space.
 
+## Wiki publishing
+
+Read `contract.wiki_publishing` from authenticated bootstrap and use
+`llama help wiki` for the save commands. New authorized publications default
+to complete self-contained HTML. Preserve full report content, charts,
+interactions and existing language/version markers, with rendering assets
+embedded. Read the exact slug and language before edits and preserve its
+format. Honor explicit Markdown requests. For MCP, set `content_type: html`
+and the intended `lang`. Verify the save receipt and canonical page before
+reporting completion.
+
 ## Report UX friction
 
 When a user, agent or both encounter a concrete obstacle (including a task that

package/CHANGELOG.md

@@ -6,6 +6,51 @@ this project adheres to [Semantic Versioning](https://semver.org).
 
 ## [Unreleased]
 
+## [2.8.0] - 2026-11-12
+
+### Added
+
+- Export the API-backed MCP tool catalog from `lib/mcp-api-tools.mjs`.
+  `registerApiTools(server, { request, formatError, version, only })` registers
+  the Deal, Deal Memory, bootstrap, Page schema, skills, preference and Wiki
+  tools against an injected request function, so a remote MCP host can serve
+  the same catalog as the stdio server. The module also exports
+  `writeDealCommandSchema`. Tools that need local credentials or files stay in
+  `llama-mcp`. No tool name, schema or behavior changed for stdio users.
+
+### Changed
+
+- `write_deal` and `wiki_save` descriptions each name the other as the
+  alternative destination: a file or HTML about one company is a Deal
+  Artifact; knowledge not tied to one company belongs in the Wiki.
+
+## [2.7.1] - 2026-11-10
+
+### Added
+
+- Add `llama help wiki`, save usage guidance, and MCP publishing descriptions
+  that lead agents to the current authenticated Wiki publishing contract and
+  complete self-contained HTML. Existing Markdown save behavior is preserved.
+- Allow MCP `wiki_save` to send `lang`, matching CLI and Core support for
+  language-specific publications and updates.
+
+## [2.7.0] - 2026-11-05
+
+### Added
+
+- Read Deal Information selectively with `llama deal read <dealId>
+  --information-id <ids> | --information-type <types> | --information-q <text>`
+  or MCP `read_deal.informationIds/informationTypes/informationQuery`, instead
+  of loading all memory with `--detail memory`. Core API 5.42.0+ returns full
+  values for id reads and snippets for text reads, omits values over 8,000
+  characters in text/type reads, and echoes the applied filter; responses from
+  an older Core that ignored the filter are rejected.
+- Filter Deal search by pipeline status with `llama deal search --status
+  Invested[,Diligence]` or MCP `search_deals.status`, alone or combined with a
+  query, sector, state and limit, so "every invested Deal" is one bounded query
+  instead of a guess. Core API 5.42.0+ echoes the applied statuses; an older
+  Core is rejected.
+
 ## [2.6.0] - 2026-11-02
 
 ### Added

package/README.md

@@ -68,6 +68,15 @@ llama deal search "humanoid" --sector "robotics" --state active
 ```
 
 `--sector` searches sector and subsector and can be used without a query.
+`--status` matches the current pipeline status exactly (any of a comma list)
+and also works alone; with Core API 5.42.0+ it enumerates, for example, every
+invested Deal in one bounded query:
+
+```bash
+llama deal search --status Invested --limit 200
+```
+
+Results carry `investmentDate` and `markedInvestedAt` for ordering.
 MCP `search_deals` accepts the same optional `q`, `sector`, `state` and `limit`.
 If Core does not confirm the sector filter in its response, the client reports
 an unsupported-server error instead of returning an unfiltered pipeline.
@@ -80,6 +89,27 @@ wording, then read candidate Deals to verify specific categories and claims.
 Search reads current Page data directly, so updates and clears are reflected
 immediately without a separate indexing job or manual tag maintenance.
 
+
+### Read Information selectively
+
+With Core API 5.42.0 or newer, read only the Information you need instead of
+`--detail memory` (which can return megabytes on a large Deal):
+
+```bash
+llama deal read <dealId> --information-q "ARR"
+llama deal read <dealId> --information-type founder_claim,team
+llama deal read <dealId> --information-id <recordId>,<recordId>
+```
+
+`--information-q` matches literal text in a record's type, subject, labels and
+value and returns `match.snippets` around each hit. In text and type reads, a
+value over 8,000 characters comes back as `{ omitted, chars }`; read that record
+with `--information-id` for its full value. Filters combine with AND, return at
+most 50 records, and `informationFilter` echoes what Core applied
+(`matched > returned` means narrow the filter). MCP `read_deal` accepts the same
+filters as `informationIds`, `informationTypes` and `informationQuery`. If Core
+does not confirm the filter, the client reports an unsupported-server error
+instead of returning unfiltered memory.
 ### Create
 
 ```json

package/README.zh-CN.md

@@ -70,6 +70,34 @@ llama deal search "humanoid" --sector "robotics" --state active
 更宽的行业或其他措辞，再读取候选 Deal 核实具体分类和结论。搜索直接读取当前
 Page 数据，更新和清空立即生效，无需另外维护索引或标签。
 
+
+`--status` 按当前 pipeline 状态精确匹配（可用逗号给多个），也可以单独使用。
+Core API 5.42.0 及以上版本可以一次列出所有已投 Deal：
+
+```bash
+llama deal search --status Invested --limit 200
+```
+
+结果里带 `investmentDate` 和 `markedInvestedAt`，可以按投资时间排序。
+
+### 按需读取 Information
+
+Core API 5.42.0 及以上版本可以只读需要的 Information，不必用 `--detail memory`
+（大 Deal 可能一次返回数 MB）：
+
+```bash
+llama deal read <dealId> --information-q "ARR"
+llama deal read <dealId> --information-type founder_claim,team
+llama deal read <dealId> --information-id <recordId>,<recordId>
+```
+
+`--information-q` 在记录的 type、subject、labels 和 value 中做字面匹配，并在
+`match.snippets` 里返回命中处的上下文。按文本或类型读取时，超过 8,000 字符的
+value 会以 `{ omitted, chars }` 返回，需要全文时用 `--information-id` 读取该记录。
+多个条件按 AND 组合，最多返回 50 条；`informationFilter` 回显 Core 实际应用的
+条件（`matched > returned` 表示需要再收窄）。MCP `read_deal` 用
+`informationIds`、`informationTypes`、`informationQuery` 接受同样的条件。如果
+Core 没有确认过滤条件，客户端会报"服务端不支持"，而不是返回未过滤的全部内容。
 ### 创建 Deal
 
 ```json

package/bin/llama-mcp.mjs

@@ -1,17 +1,16 @@
 #!/usr/bin/env node
 
-import { buildArtifactReadPath, buildWikiReadPath } from "../lib/content-read.mjs";
 import { createRequire } from "node:module";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
+import { registerApiTools, structuredBootstrapManifest, textResult } from "../lib/mcp-api-tools.mjs";
 import {
   formatErrorForDisplay,
   getAuthHeaders,
   readBriefing,
   request,
   setClientRuntime,
-  structuredBootstrapManifest,
 } from "../lib/client.mjs";
 import {
   clearExternalSession,
@@ -20,16 +19,7 @@ import {
   startExternalSession,
   uploadExternalFile,
 } from "../lib/external.mjs";
-import {
-  buildDealReadPath,
-  buildDealSearchPath,
-  verifyDealSearchResult,
-  compactDealWriteResult,
-  prepareDealCommand,
-} from "../lib/deal-actions.mjs";
 import { submitFeedback, readFeedback, resolveFeedback } from "../lib/feedback.mjs";
-import { buildDealMemoryPath } from "../lib/deal-memory-actions.mjs";
-import { buildPageSchemaPath, MAX_PAGE_SCHEMA_FIELDS } from "../lib/page-schema.mjs";
 
 const requireFromHere = createRequire(import.meta.url);
 const { version: PKG_VERSION } = requireFromHere("../package.json");
@@ -37,13 +27,6 @@ setClientRuntime({ client: "mcp" });
 
 const server = new McpServer({ name: "llama-mcp", version: PKG_VERSION });
 
-function textResult(text, isError = false) {
-  return {
-    content: [{ type: "text", text }],
-    ...(isError ? { isError: true } : {}),
-  };
-}
-
 async function callApi(method, path, body, transform = (value) => value) {
   try {
     const result = transform(await request(method, path, body));
@@ -84,168 +67,9 @@ server.registerTool("feedback_resolve", {
   catch (error) { return textResult(formatErrorForDisplay(error), true); }
 });
 
-const originSchema = z.object({
-  kind: z.enum(["user", "agent", "system"]),
-  originalUserUtterance: z.string().min(1).optional(),
-  originatingChatRecordId: z.string().uuid().optional(),
-});
-
-const writeDealCommandSchema = z.discriminatedUnion("operation", [
-  z.object({
-    operation: z.literal("input.submit"),
-    dealId: z.string().uuid(),
-    format: z.string().min(1).max(120).optional(),
-    content: z.any(),
-    source: z.record(z.string(), z.any()).optional(),
-    origin: originSchema,
-    idempotencyKey: z.string().min(1).max(240).optional(),
-  }).strict(),
-  z.object({
-    operation: z.literal("information.put"),
-    dealId: z.string().uuid(),
-    informationId: z.string().uuid().optional(),
-    type: z.string().min(1).max(120),
-    labels: z.array(z.string()).optional(),
-    subject: z.record(z.string(), z.any()).optional(),
-    value: z.any(),
-    expectedVersion: z.number().int().positive().optional(),
-    origin: originSchema,
-    idempotencyKey: z.string().min(1).max(240).optional(),
-  }).strict(),
-  z.object({
-    operation: z.literal("page.patch"),
-    dealId: z.string().uuid(),
-    patch: z.record(z.string(), z.any()),
-    expectedRevision: z.number().int().nonnegative().optional(),
-    origin: originSchema,
-    idempotencyKey: z.string().min(1).max(240).optional(),
-  }).strict(),
-  z.object({
-    operation: z.literal("artifact.put"),
-    dealId: z.string().uuid(),
-    artifactId: z.string().uuid().optional().describe("Reuse the existing ID to append a complete file version, including on rename. Omit for a new document without a title collision, or explicitly use a fresh UUID for a distinct same-name source."),
-    kind: z.string().min(1).max(120),
-    title: z.string().min(1).max(500),
-    mimeType: z.string().min(1).max(240),
-    contentBase64: z.string().min(1).optional(),
-    storageKey: z.string().min(1).optional(),
-    storageUrl: z.string().url().optional(),
-    byteSize: z.number().int().nonnegative().optional(),
-    sha256: z.string().regex(/^[0-9a-f]{64}$/).optional(),
-    metadata: z.record(z.string(), z.any()).optional(),
-    origin: originSchema,
-    idempotencyKey: z.string().min(1).max(240).optional(),
-  }).strict(),
-]);
-
-// Deal is deliberately a closed four-tool surface. Do not add split resource
-// tools here: one more tool is one more branch every agent must reason about.
-server.registerTool(
-  "search_deals",
-  {
-    description: "Search current Deal metadata by company name/key, description, sector/subsector or founder name in either stored language. Use short keywords; matching is a case-insensitive literal substring, not semantic search. Combine q with sector/state/limit, or use sector alone for category discovery. Sector filters before limit and requires a supporting Core server. Exact names rank first. Inspect searchMatch fields and search.has_more; truncated results are not exhaustive. On zero matches, try broader or alternative wording before concluding no Deal exists. Read candidates to verify specific categories and claims. Always search before creating a company.",
-    inputSchema: {
-      q: z.string().optional(),
-      sector: z.string().trim().min(1).max(200).optional(),
-      state: z.enum(["active", "archived", "trashed"]).optional(),
-      limit: z.number().int().min(1).max(2000).optional(),
-    },
-  },
-  // @core-api-operation GET /api/occam/deals
-  async ({ q, sector, state, limit } = {}) => callApi(
-    "GET", buildDealSearchPath(q, { sector, state, limit }), undefined,
-    (result) => verifyDealSearchResult(result, { sector }),
-  ),
-);
-
-server.registerTool(
-  "read_deal",
-  {
-    description: "Read one Deal. Live Page is current human-visible state; Information is memory and never updates Page automatically. Use artifactId to read original source text with page/paragraph anchors. Continue with nextOffset and source.sha256. Page field semantics come from agent_bootstrap, not every Deal read.",
-    inputSchema: {
-      dealId: z.string().min(1),
-      detail: z.enum(["overview", "memory", "files", "conversation", "history", "all"]).optional(),
-      artifactId: z.string().uuid().optional(),
-      version: z.number().int().min(1).optional(),
-      offset: z.number().int().min(0).optional(),
-      limit: z.number().int().min(1).max(50000).optional(),
-      sha256: z.string().regex(/^[a-f0-9]{64}$/).optional(),
-    },
-  },
-  async ({ dealId, detail, artifactId, ...options }) => {
-    if (artifactId) {
-      if (detail) throw new Error("Use artifactId or detail, not both");
-      // @core-api-operation GET /api/occam/deals/{dealId}/artifacts/{artifactId}
-      return callApi("GET", buildArtifactReadPath(dealId, artifactId, options));
-    }
-    if (Object.values(options).some(value => value !== undefined)) throw new Error("Content options require artifactId");
-    // @core-api-operation GET /api/occam/deals/{dealId}
-    return callApi("GET", buildDealReadPath(dealId, detail || "overview"));
-  },
-);
-
-server.registerTool(
-  "create_deal",
-  {
-    description: "Create one Deal intent. Core owns Drive, initial resources, idempotency, and Events.",
-    inputSchema: {
-      companyName: z.string().min(1).max(240),
-      companyKey: z.string().min(1).max(240).optional(),
-      page: z.record(z.string(), z.any()).optional(),
-      information: z.array(z.record(z.string(), z.any())).optional(),
-      origin: originSchema,
-      idempotencyKey: z.string().min(1).max(240).optional(),
-    },
-  },
-  async (input) => callApi("POST", "/api/occam/deals/commands", prepareDealCommand("create", input)),
-);
-
-server.registerTool(
-  "write_deal",
-  {
-    description: "The only Deal mutation tool. Pass one command: input.submit, information.put, page.patch, or artifact.put. Before artifact.put, read Deal files: reuse artifactId for a revision; a same-kind/title collision without an ID returns OCCAM_CONFLICT. Titles are candidates, not identity. Select the intended existing ID from the request/content, or explicitly generate a fresh UUID for a distinct same-name source. Send complete revised bytes, preserve applicable metadata, and verify the ID/version. Core hosts text/html in Command; do not mirror HTML to Drive or require a Drive link. Non-HTML source files, including original transcripts and recordings, go to Drive through artifact.put. Keep source-file bodies out of Input, Information, Page and metadata; save extracted facts and summaries with source references and preserve the user request. page.patch does not edit file bytes. All Page content fields are Agent-writable; author controls attribution, not permission. Before page.patch, use get_live_deal_page_schema for the exact fields being changed and write bilingual Page prose. page.patch is JSON Merge Patch: arrays replace whole arrays, so read-modify-write and preserve sibling slots. A Llama user's own judgment is human_subjective_view.people or human_subjective_view.business and must carry value.speaker, value.rawText quoted verbatim from origin.originalUserUtterance, and value.summary (the agent's restatement); it is rejected otherwise.",
-    // MCP SDK 1.30 only publishes object schemas at the tool root. Nesting one
-    // command preserves the real discriminated union instead of flattening four
-    // incompatible operations into false affordances.
-    inputSchema: { command: writeDealCommandSchema },
-  },
-  async ({ command }) => callApi(
-    "POST",
-    "/api/occam/deals/commands",
-    prepareDealCommand("write", command),
-    (result) => compactDealWriteResult(command, result),
-  ),
-);
-
-// Deal Memory is a separate sidecar domain. These do not add an Occam Deal
-// business resource or widen the deliberately closed four-tool Deal surface.
-server.registerTool(
-  "get_deal_memory",
-  {
-    description: "Read the complete canonical Markdown Deal Story and its opaque concurrency version. A returned placeholder is an existing Story whose version is required for a write; only 404 means no Story exists.",
-    inputSchema: { dealId: z.string().uuid() },
-  },
-  // @core-api-operation GET /api/deal-memory/{dealId}/story
-  async ({ dealId }) => callApi("GET", buildDealMemoryPath(dealId)),
-);
-
-server.registerTool(
-  "update_deal_memory",
-  {
-    description: "Replace the complete Markdown Deal Story with one coherent current understanding; never append an update log, restate Live Deal Page/Deal Information fields, or write when understanding would not materially improve. Frontmatter must contain matching deal_id plus stable uuid and created timestamps; updated must strictly advance. Pass the version from get_deal_memory for every returned Story, including a placeholder; only 404 permits creation without expected_version.",
-    inputSchema: {
-      dealId: z.string().uuid(),
-      markdown: z.string().min(1).max(1_048_576),
-      expected_version: z.string().min(1).optional(),
-    },
-  },
-  // @core-api-operation PUT /api/deal-memory/{dealId}/story
-  async ({ dealId, markdown, expected_version }) => callApi(
-    "PUT",
-    buildDealMemoryPath(dealId),
-    { markdown, ...(expected_version ? { expected_version } : {}) },
-  ),
-);
+// Deal, Deal Memory, bootstrap, Page schema, skills, preferences and Wiki tools
+// are shared with remote MCP hosts; see lib/mcp-api-tools.mjs.
+registerApiTools(server, { request, formatError: formatErrorForDisplay, version: PKG_VERSION });
 
 server.registerTool(
   "auth_status",
@@ -265,184 +89,6 @@ server.registerTool(
   },
 );
 
-server.registerTool(
-  "agent_bootstrap",
-  {
-    description: "Mandatory before Llama work: fetch the authenticated two-part private Brain (Investment Framework V3 + Llama Command operating skill), a compact Live Deal Page schema index, runtime contract, and visible Llama OS skills. Read exact Page fields separately with get_live_deal_page_schema.",
-    inputSchema: { limit: z.number().int().min(1).max(100).optional() },
-  },
-  async ({ limit } = {}) => {
-    const params = new URLSearchParams({ clientVersion: PKG_VERSION });
-    params.set("page_schema", "progressive");
-    if (limit) params.set("limit", String(limit));
-    try {
-      const result = await request("GET", `/api/agent/manifest?${params}`);
-      return textResult(JSON.stringify(structuredBootstrapManifest(result), null, 2));
-    } catch (error) {
-      return textResult(formatErrorForDisplay(error), true);
-    }
-  },
-);
-
-server.registerTool(
-  "get_live_deal_page_schema",
-  {
-    description: "Read the Live Deal Page schema progressively. Call with no selector for the compact index; before page.patch, request only exact fields or one section. This is read-only context, not a fifth Deal action.",
-    inputSchema: {
-      fields: z.array(z.string().min(1)).min(1).max(MAX_PAGE_SCHEMA_FIELDS).optional(),
-      section: z.string().min(1).optional(),
-    },
-  },
-  async ({ fields, section } = {}) => {
-    try {
-      // @core-api-operation GET /api/agent/page-schema
-      return await callApi("GET", buildPageSchemaPath({ fields, section }));
-    } catch (error) {
-      return textResult(formatErrorForDisplay(error), true);
-    }
-  },
-);
-
-server.registerTool(
-  "skills_search",
-  {
-    description: "Search authenticated runtime skills; read only the relevant result.",
-    inputSchema: { q: z.string().min(1), limit: z.number().int().min(1).max(100).optional() },
-  },
-  async ({ q, limit }) => {
-    const params = new URLSearchParams({ q });
-    if (limit) params.set("limit", String(limit));
-    return callApi("GET", `/api/agent/skills?${params}`);
-  },
-);
-
-server.registerTool(
-  "skills_read",
-  {
-    description: "Read one authenticated runtime skill by slug.",
-    inputSchema: { slug: z.string().min(1) },
-  },
-  async ({ slug }) => callApi("GET", `/api/agent/skills/${encodeURIComponent(slug)}`),
-);
-
-server.registerTool(
-  "pref_list",
-  {
-    description: "List standing agent preferences.",
-    inputSchema: { status: z.enum(["active", "proposed", "retired", "all"]).optional() },
-  },
-  async ({ status } = {}) => {
-    const params = new URLSearchParams();
-    if (status) params.set("status", status);
-    return callApi("GET", `/api/agent/preferences${params.size ? `?${params}` : ""}`);
-  },
-);
-
-server.registerTool(
-  "pref_add",
-  {
-    description: "Save a durable user or team preference; procedures belong in skills.",
-    inputSchema: {
-      key: z.string().min(1),
-      content: z.string().min(1).max(280),
-      scope: z.enum(["user", "team"]).optional(),
-      evidence: z.string().optional(),
-    },
-  },
-  async ({ key, content, scope, evidence }) =>
-    callApi("POST", "/api/agent/preferences", { key, content, scope, evidence }),
-);
-
-server.registerTool(
-  "pref_set_status",
-  {
-    description: "Activate or retire a standing preference.",
-    inputSchema: { id: z.number().int().positive(), status: z.enum(["active", "retired"]) },
-  },
-  async ({ id, status }) => callApi("PATCH", `/api/agent/preferences/${id}`, { status }),
-);
-
-server.registerTool(
-  "object_inspect",
-  {
-    description: "Explain a Command URL or object before guessing that it is broken.",
-    inputSchema: {
-      q: z.string().optional(),
-      type: z.string().optional(),
-      id: z.string().optional(),
-      lang: z.enum(["en", "zh"]).optional(),
-    },
-  },
-  async ({ q, type, id, lang } = {}) => {
-    const params = new URLSearchParams();
-    if (q) params.set("q", q);
-    if (type) params.set("type", type);
-    if (id) params.set("id", id);
-    if (lang) params.set("lang", lang);
-    return callApi("GET", `/api/agent/explain?${params}`);
-  },
-);
-
-server.registerTool(
-  "wiki_search",
-  {
-    description: "Search institutional knowledge in the internal Wiki.",
-    inputSchema: { q: z.string().min(1) },
-  },
-  async ({ q }) => callApi("GET", `/api/wiki/search?q=${encodeURIComponent(q)}`),
-);
-
-server.registerTool(
-  "wiki_read",
-  {
-    description: "Read one Wiki article. format=text extracts its original upload or page body. attachment follows an ID listed in attachments. Continuations require offset and sha256.",
-    inputSchema: {
-      slug: z.string().min(1), lang: z.enum(["en", "zh"]).optional(),
-      format: z.literal("text").optional(), attachment: z.string().optional(),
-      offset: z.number().int().min(0).optional(), limit: z.number().int().min(1).max(50000).optional(),
-      sha256: z.string().regex(/^[a-f0-9]{64}$/).optional(),
-    },
-  },
-  // @core-api-operation GET /api/wiki/{slug}
-  async ({ slug, ...options }) => callApi("GET", buildWikiReadPath(slug, options)),
-);
-
-server.registerTool(
-  "wiki_save",
-  {
-    description: "Create or update cross-Deal institutional knowledge, not Deal data.",
-    inputSchema: {
-      slug: z.string().min(1),
-      title: z.string().min(1),
-      content: z.string(),
-      sources: z.array(z.string()).min(1),
-      content_type: z.enum(["markdown", "html"]).optional(),
-    },
-  },
-  async ({ slug, title, content, sources, content_type }) =>
-    callApi("POST", "/api/wiki/save", { slug, title, content, sources, content_type }),
-);
-
-server.registerTool(
-  "wiki_delete",
-  {
-    description: "Soft-delete a Wiki article.",
-    inputSchema: { slug: z.string().min(1), lang: z.enum(["en", "zh"]).optional() },
-  },
-  async ({ slug, lang }) =>
-    callApi("DELETE", `/api/wiki/${encodeURIComponent(slug)}?lang=${lang === "zh" ? "zh" : "en"}`),
-);
-
-server.registerTool(
-  "wiki_restore",
-  {
-    description: "Restore a soft-deleted Wiki article.",
-    inputSchema: { slug: z.string().min(1), lang: z.enum(["en", "zh"]).optional() },
-  },
-  async ({ slug, lang }) =>
-    callApi("POST", `/api/wiki/${encodeURIComponent(slug)}/restore?lang=${lang === "zh" ? "zh" : "en"}`),
-);
-
 server.registerTool(
   "pitch_start",
   {

package/bin/llama.mjs

@@ -36,7 +36,9 @@ import {
   DEAL_ACTIONS,
   buildDealReadPath,
   buildDealSearchPath,
+  informationReadFilter,
   verifyDealSearchResult,
+  verifyInformationReadResult,
   compactDealWriteResult,
   prepareDealCommand,
   readJsonInput,
@@ -54,7 +56,7 @@ const { version: PKG_VERSION } = requireFromHere("../package.json");
 const HELP_ROOT = `Llama Command CLI 2 — small authenticated tools for agents.
 
 Deal has exactly four actions:
-  llama deal search [query] [--sector <text>] [--state active|archived|trashed] [--limit 10]
+  llama deal search [query] [--sector <text>] [--status <status>] [--state active|archived|trashed] [--limit 10]
   llama deal read <dealId> [--detail overview|memory|files|conversation|history|all]
   llama deal create --json <file|->
   llama deal write --json <file|->
@@ -82,12 +84,39 @@ Separate preserved domains:
   llama admin auth-events|deal-events|agent-events|feedback
   llama pitch start|say|upload|status|finalize|end
 
-Run \`llama help deal\` for the mutation contract.`;
+Run \`llama help deal\` for the mutation contract and \`llama help wiki\` for publishing.`;
+
+const HELP_WIKI = `Llama Wiki — publish complete institutional knowledge pages
+
+  llama agent bootstrap
+  llama wiki search <query>
+  llama wiki read <slug> [--lang en|zh]
+  llama wiki save <slug> --title "..." --file page.html --content-type html --lang en --sources "url1;url2"
+  llama wiki delete <slug> [--lang en|zh]
+  llama wiki restore <slug> [--lang en|zh]
+
+Follow the current authenticated contract.wiki_publishing guidance. New
+publications default to complete self-contained HTML. Preserve the report's
+full content, charts, interactions and existing language/version controls.
+Embed CSS, JavaScript, chart data and rendering assets in the HTML.
+
+--file reads the full file; .html/.htm selects HTML automatically. When sending
+HTML through --content, explicitly set --content-type html. Use --lang zh for
+Chinese content. Sources are required; separate them with semicolons or pipes.
+
+Honor an explicit Markdown request with --content-type markdown. Read an
+existing slug and language before editing and preserve its content_type.
+Format conversion or replacement needs authorization for that change.
+
+Read the receipt's canonical_url, content_type, langs_available, verified and
+warnings, then read back the article and check the rendered page and its
+interactions before reporting completion. Report any checks still pending.
+Wiki publication requires the user's request or authorization.`;
 
 const HELP_DEAL = `Llama Command CLI 2 — Deal contract
 
 Exactly four actions:
-  llama deal search [query] [--sector <text>] [--state active|archived|trashed] [--limit 10]
+  llama deal search [query] [--sector <text>] [--status <status>] [--state active|archived|trashed] [--limit 10]
   llama deal read <dealId> [--detail overview|memory|files|conversation|history|all]
   llama deal create --json <file|->
   llama deal write --json <file|->
@@ -99,10 +128,23 @@ Combine --sector with a query/state/limit, or search a sector without a query:
   llama deal search "humanoid" --sector "robotics"
 Metadata search and --sector require Core API 5.41.0 or newer. A sector filter
 must be confirmed by Core; old unfiltered responses are rejected.
+--status matches the current pipeline status exactly (any of a comma list) and
+works alone; it requires Core API 5.42.0+. To list every invested Deal:
+  llama deal search --status Invested --limit 200
+then order by investmentDate / markedInvestedAt.
 Use short keywords. searchMatch lists matched fields; search.has_more means
 results are truncated. On zero matches, try broader or alternative wording.
 Read candidate Deals to verify categories and substantive claims.
 
+Read Information selectively (Core API 5.42.0+), instead of --detail memory:
+  llama deal read <dealId> --information-q "ARR"            literal text; returns snippets
+  llama deal read <dealId> --information-type founder_claim exact types, comma-separated
+  llama deal read <dealId> --information-id <id>[,<id>]     full values, up to 50
+Filters combine with AND. Values over 8,000 characters in a text or type read
+come back as { omitted, chars }; read that record by id. informationFilter
+echoes what Core applied; matched > returned means narrow the filter. An older
+Core that ignores the filter is rejected rather than shown as filtered.
+
 Read original source content:
   llama deal read <dealId> --artifact <artifactId> [--version N] [--offset N --sha256 HASH] [--limit N] [--output <file>]
   llama wiki read <slug> --format text [--attachment <referenceId>] [--offset N --sha256 HASH] [--output <file>]
@@ -268,6 +310,7 @@ function usage(area) {
     area === "memory" ? HELP_MEMORY :
     area === "page-schema" ? HELP_PAGE_SCHEMA :
     area === "feedback" ? HELP_FEEDBACK :
+    area === "wiki" ? HELP_WIKI :
     HELP_ROOT,
   );
 }
@@ -540,7 +583,7 @@ async function handleWiki(action, rest) {
   }
   if (action === "save") {
     if (!slug || typeof flags.title !== "string" || typeof flags.sources !== "string") {
-      throw new Error('Usage: llama wiki save <slug> --title "..." --content "..."|--file <path> --sources "url1;url2"');
+      throw new Error('Usage: llama wiki save <slug> --title "..." --file page.html --content-type html --sources "url1;url2". See llama help wiki for HTML and Markdown publishing.');
     }
     if (flags.content && flags.file) throw new Error("Use either --content or --file, not both.");
     const content = flags.file ? await readFile(String(flags.file), "utf8") : flags.content;
@@ -749,7 +792,7 @@ async function main() {
   }
 
   if (area === "deal" && action === "search") {
-    const { flags, positional } = parseFlags(rest, ["state", "limit", "sector"]);
+    const { flags, positional } = parseFlags(rest, ["state", "limit", "sector", "status"]);
     // @core-api-operation GET /api/occam/deals
     const result = await request("GET", buildDealSearchPath(positional.join(" ").trim(), flags));
     print(verifyDealSearchResult(result, flags));
@@ -757,16 +800,19 @@ async function main() {
   }
   if (area === "deal" && action === "read") {
     const dealId = rest[0];
-    const { flags } = parseFlags(rest.slice(1), ["detail", "artifact", "version", "format", "offset", "limit", "sha256", "output"]);
+    const { flags } = parseFlags(rest.slice(1), ["detail", "artifact", "version", "format", "offset", "limit", "sha256", "output", "information-id", "information-type", "information-q"]);
+    const filter = informationReadFilter({ ids: flags["information-id"], types: flags["information-type"], q: flags["information-q"] });
     if (flags.artifact !== undefined) {
       if (flags.detail !== undefined) throw new Error("Use --artifact or --detail, not both");
+      if (filter) throw new Error("Use --artifact or --information-*, not both");
       // @core-api-operation GET /api/occam/deals/{dealId}/artifacts/{artifactId}
       const result = await request("GET", buildArtifactReadPath(dealId, flags.artifact, flags));
       print(await saveContentSource(result, flags.output));
     } else {
       if (["version", "format", "offset", "limit", "sha256", "output"].some(key => flags[key] !== undefined)) throw new Error("Content options require --artifact");
       // @core-api-operation GET /api/occam/deals/{dealId}
-      print(await request("GET", buildDealReadPath(dealId, flags.detail === true ? "overview" : flags.detail || "overview")));
+      const result = await request("GET", buildDealReadPath(dealId, flags.detail === true ? "overview" : flags.detail || "overview", filter));
+      print(verifyInformationReadResult(result, filter));
     }
     return;
   }

package/contracts/core-api.json

@@ -1,9 +1,9 @@
 {
   "format": "llama.core-api-contract.v1",
   "name": "llama-core-api",
-  "apiVersion": "5.41.0",
+  "apiVersion": "5.42.0",
   "openapiVersion": "3.0.3",
-  "sha256": "4276125d5c00112ce0a25a563870817a9671db573de832abd874c1a8dff17c4b",
+  "sha256": "c244351c5d6b4f9f917a234229a3e7044558e8c4870decf0e8b1518a166f8799",
   "pathCount": 133,
   "operationCount": 164
 }

package/lib/build-manifest.json

@@ -1,15 +1,15 @@
 {
   "format": "llama.cli-build.v1",
   "packageName": "@llamaventures/cli",
-  "packageVersion": "2.6.0",
-  "sourceSha": "98937214995aba0029521dbeea358cb9e9d32ccf",
+  "packageVersion": "2.8.0",
+  "sourceSha": "ec9daefda51090ca3331a22db1db45b3c56c3452",
   "sourceKind": "github",
   "sourceDirty": false,
   "coreApiContract": {
     "format": "llama.core-api-contract.v1",
     "name": "llama-core-api",
-    "apiVersion": "5.41.0",
+    "apiVersion": "5.42.0",
     "openapiVersion": "3.0.3",
-    "sha256": "4276125d5c00112ce0a25a563870817a9671db573de832abd874c1a8dff17c4b"
+    "sha256": "c244351c5d6b4f9f917a234229a3e7044558e8c4870decf0e8b1518a166f8799"
   }
 }

package/lib/client.mjs

@@ -594,13 +594,7 @@ export function formatErrorForDisplay(error) {
   return `Error${code}: ${message}`;
 }
 
-export function structuredBootstrapManifest(manifest) {
-  if (!manifest || typeof manifest !== "object" || Array.isArray(manifest)) {
-    return manifest;
-  }
-  const { briefing: _renderedDuplicate, ...structured } = manifest;
-  return structured;
-}
+export { structuredBootstrapManifest } from "./mcp-api-tools.mjs";
 
 async function requestWithRetry(method, endpoint, body, opts, allowRetry) {
   const authHeaders = await getAuthHeaders();

package/lib/deal-actions.mjs

@@ -169,11 +169,27 @@ export function buildDealSearchPath(query, flags = {}) {
   if (query) params.set("q", query);
   const sector = dealSearchSector(flags);
   if (sector !== undefined) params.set("sector", sector);
+  const status = dealSearchStatus(flags);
+  if (status !== undefined) params.set("status", status.join(","));
   if (flags.state && flags.state !== true) params.set("state", String(flags.state));
   if (flags.limit && flags.limit !== true) params.set("limit", String(flags.limit));
   return `/api/occam/deals${params.size ? `?${params}` : ""}`;
 }
 
+/** Exact pipeline statuses (Core API 5.42.0+), e.g. "Invested" or ["Invested", "Diligence"]. */
+function dealSearchStatus(flags) {
+  if (flags.status === undefined) return undefined;
+  if (flags.status === true) throw new Error("--status requires a pipeline status, e.g. Invested");
+  const values = (Array.isArray(flags.status) ? flags.status : String(flags.status).split(","))
+    .map((value) => String(value).trim())
+    .filter(Boolean);
+  if (!values.length) throw new Error("--status requires a pipeline status, e.g. Invested");
+  if (values.length > 10 || values.some((value) => value.length > 60)) {
+    throw new Error("--status accepts at most 10 statuses of at most 60 characters");
+  }
+  return [...new Set(values)];
+}
+
 function dealSearchSector(flags) {
   if (flags.sector === undefined) return undefined;
   if (typeof flags.sector !== "string" || !flags.sector.trim() || flags.sector.trim().length > 200) {
@@ -183,6 +199,10 @@ function dealSearchSector(flags) {
 }
 
 export function verifyDealSearchResult(result, flags = {}) {
+  const status = dealSearchStatus(flags);
+  if (status !== undefined && JSON.stringify(result?.search?.filters?.status ?? null) !== JSON.stringify(status)) {
+    throw new Error("Core did not confirm the requested status filter. Filtering by pipeline status requires Core API 5.42.0 or newer; this response was not accepted as filtered results.");
+  }
   const sector = dealSearchSector(flags);
   if (sector !== undefined && result?.search?.filters?.sector !== sector) {
     throw new Error("Core did not confirm the requested sector filter. Upgrade the Llama Command server before retrying --sector; this response was not accepted as filtered results.");
@@ -190,7 +210,55 @@ export function verifyDealSearchResult(result, flags = {}) {
   return result;
 }
 
-export function buildDealReadPath(dealId, detail = "overview") {
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+
+function listInput(value) {
+  if (value === undefined || value === null) return undefined;
+  const values = (Array.isArray(value) ? value : String(value).split(","))
+    .map((item) => String(item).trim())
+    .filter(Boolean);
+  return values.length ? [...new Set(values)] : undefined;
+}
+
+/**
+ * Targeted Information read: ids (full values), exact types, and/or literal
+ * text. Returns undefined when no filter was requested. Core API 5.42.0+.
+ */
+export function informationReadFilter({ ids, types, q } = {}) {
+  const filter = {};
+  const idList = listInput(ids);
+  const typeList = listInput(types);
+  if (idList) {
+    if (idList.length > 50) throw new Error("--information-id accepts at most 50 ids");
+    if (idList.some((id) => !UUID_RE.test(id))) throw new Error("--information-id must be Information record UUIDs");
+    filter.ids = idList.map((id) => id.toLowerCase());
+  }
+  if (typeList) {
+    if (typeList.length > 20) throw new Error("--information-type accepts at most 20 types");
+    if (typeList.some((type) => type.length > 120)) throw new Error("--information-type values must be at most 120 characters");
+    filter.types = typeList;
+  }
+  if (q !== undefined && q !== null) {
+    if (q === true) throw new Error("--information-q requires text");
+    const text = String(q).trim();
+    if (text.length < 2 || text.length > 200) throw new Error("--information-q must be 2-200 characters");
+    filter.q = text;
+  }
+  return Object.keys(filter).length ? filter : undefined;
+}
+
+/** Reject an unfiltered response from a Core that predates targeted reads. */
+export function verifyInformationReadResult(result, filter) {
+  if (!filter) return result;
+  const applied = result?.informationFilter;
+  const same = (a, b) => JSON.stringify(a ?? null) === JSON.stringify(b ?? null);
+  if (!applied || !same(applied.ids, filter.ids) || !same(applied.types, filter.types) || !same(applied.q, filter.q)) {
+    throw new Error("Core did not confirm the requested Information filter. Targeted Information reads require Core API 5.42.0 or newer; this response was not accepted as filtered results. Use --detail memory on an older server.");
+  }
+  return result;
+}
+
+export function buildDealReadPath(dealId, detail = "overview", filter) {
   if (!dealId || dealId.startsWith("--")) {
     throw new Error("Usage: llama deal read <dealId> [--detail overview|memory|files|conversation|history|all]");
   }
@@ -203,7 +271,13 @@ export function buildDealReadPath(dealId, detail = "overview") {
     all: "information,artifacts,chat,feed",
   }[detail];
   if (expansion === undefined) throw new Error(`Unknown detail: ${detail}`);
-  return `/api/occam/deals/${encodeURIComponent(dealId)}${expansion ? `?expand=${expansion}` : ""}`;
+  const params = new URLSearchParams();
+  if (expansion) params.set("expand", expansion);
+  if (filter?.ids) params.set("information_id", filter.ids.join(","));
+  if (filter?.types) params.set("information_type", filter.types.join(","));
+  if (filter?.q !== undefined) params.set("information_q", filter.q);
+  const query = params.toString().replace(/%2C/g, ",");
+  return `/api/occam/deals/${encodeURIComponent(dealId)}${query ? `?${query}` : ""}`;
 }
 
 /**

package/lib/mcp-api-tools.mjs

@@ -0,0 +1,414 @@
+// The API-backed Llama tool catalog, independent of transport and of how the
+// caller authenticates. The stdio server (bin/llama-mcp.mjs) passes the local
+// HTTP client; a remote MCP endpoint hosted by Llama Command passes its own
+// in-process request function. Nothing here may touch local credentials,
+// local files, or process state: tools that need those stay in bin/.
+
+import { z } from "zod";
+import { buildArtifactReadPath, buildWikiReadPath } from "./content-read.mjs";
+import {
+  buildDealReadPath,
+  buildDealSearchPath,
+  verifyDealSearchResult,
+  informationReadFilter,
+  verifyInformationReadResult,
+  compactDealWriteResult,
+  prepareDealCommand,
+} from "./deal-actions.mjs";
+import { buildDealMemoryPath } from "./deal-memory-actions.mjs";
+import { buildPageSchemaPath, MAX_PAGE_SCHEMA_FIELDS } from "./page-schema.mjs";
+
+export function textResult(text, isError = false) {
+  return {
+    content: [{ type: "text", text }],
+    ...(isError ? { isError: true } : {}),
+  };
+}
+
+/** The manifest also carries a rendered duplicate of itself; tools return the structured half. */
+export function structuredBootstrapManifest(manifest) {
+  if (!manifest || typeof manifest !== "object" || Array.isArray(manifest)) {
+    return manifest;
+  }
+  const { briefing: _renderedDuplicate, ...structured } = manifest;
+  return structured;
+}
+
+export const originSchema = z.object({
+  kind: z.enum(["user", "agent", "system"]),
+  originalUserUtterance: z.string().min(1).optional(),
+  originatingChatRecordId: z.string().uuid().optional(),
+});
+
+export const writeDealCommandSchema = z.discriminatedUnion("operation", [
+  z.object({
+    operation: z.literal("input.submit"),
+    dealId: z.string().uuid(),
+    format: z.string().min(1).max(120).optional(),
+    content: z.any(),
+    source: z.record(z.string(), z.any()).optional(),
+    origin: originSchema,
+    idempotencyKey: z.string().min(1).max(240).optional(),
+  }).strict(),
+  z.object({
+    operation: z.literal("information.put"),
+    dealId: z.string().uuid(),
+    informationId: z.string().uuid().optional(),
+    type: z.string().min(1).max(120),
+    labels: z.array(z.string()).optional(),
+    subject: z.record(z.string(), z.any()).optional(),
+    value: z.any(),
+    expectedVersion: z.number().int().positive().optional(),
+    origin: originSchema,
+    idempotencyKey: z.string().min(1).max(240).optional(),
+  }).strict(),
+  z.object({
+    operation: z.literal("page.patch"),
+    dealId: z.string().uuid(),
+    patch: z.record(z.string(), z.any()),
+    expectedRevision: z.number().int().nonnegative().optional(),
+    origin: originSchema,
+    idempotencyKey: z.string().min(1).max(240).optional(),
+  }).strict(),
+  z.object({
+    operation: z.literal("artifact.put"),
+    dealId: z.string().uuid(),
+    artifactId: z.string().uuid().optional().describe("Reuse the existing ID to append a complete file version, including on rename. Omit for a new document without a title collision, or explicitly use a fresh UUID for a distinct same-name source."),
+    kind: z.string().min(1).max(120),
+    title: z.string().min(1).max(500),
+    mimeType: z.string().min(1).max(240),
+    contentBase64: z.string().min(1).optional(),
+    storageKey: z.string().min(1).optional(),
+    storageUrl: z.string().url().optional(),
+    byteSize: z.number().int().nonnegative().optional(),
+    sha256: z.string().regex(/^[0-9a-f]{64}$/).optional(),
+    metadata: z.record(z.string(), z.any()).optional(),
+    origin: originSchema,
+    idempotencyKey: z.string().min(1).max(240).optional(),
+  }).strict(),
+]);
+
+/**
+ * Register the API-backed tools on an MCP server.
+ *
+ * @param server   an McpServer
+ * @param deps.request      async (method, path, body) => parsed JSON; throws on failure
+ * @param deps.formatError  (error) => string shown to the agent
+ * @param deps.version      client version reported to bootstrap
+ * @param deps.only         optional list of tool names; others are not registered
+ */
+export function registerApiTools(server, { request, formatError, version, only } = {}) {
+  if (typeof request !== "function") throw new Error("registerApiTools requires a request function");
+  const describeError = formatError ?? ((error) => `Error: ${error?.message ?? String(error)}`);
+  const formatErrorForDisplay = describeError;
+  const allowed = only ? new Set(only) : null;
+  const registerTool = (name, ...rest) => {
+    if (allowed && !allowed.has(name)) return;
+    server.registerTool(name, ...rest);
+  };
+
+  async function callApi(method, path, body, transform = (value) => value) {
+    try {
+      const result = transform(await request(method, path, body));
+      return textResult(typeof result === "string" ? result : JSON.stringify(result, null, 2));
+    } catch (error) {
+      return textResult(describeError(error), true);
+    }
+  }
+
+
+  // Deal is deliberately a closed four-tool surface. Do not add split resource
+  // tools here: one more tool is one more branch every agent must reason about.
+  registerTool(
+    "search_deals",
+    {
+      description: "Search current Deal metadata by company name/key, description, sector/subsector or founder name in either stored language. Use short keywords; matching is a case-insensitive literal substring, not semantic search. Combine q with sector/status/state/limit, or use sector alone for category discovery. status filters by exact pipeline status (e.g. [\"Invested\"]); to list every invested Deal use status [\"Invested\"] with limit 200 and order by investmentDate/markedInvestedAt, instead of guessing from names. Sector filters before limit and requires a supporting Core server. Exact names rank first. Inspect searchMatch fields and search.has_more; truncated results are not exhaustive. On zero matches, try broader or alternative wording before concluding no Deal exists. Read candidates to verify specific categories and claims. Always search before creating a company.",
+      inputSchema: {
+        q: z.string().optional(),
+        sector: z.string().trim().min(1).max(200).optional(),
+        status: z.array(z.string().min(1).max(60)).min(1).max(10).optional(),
+        state: z.enum(["active", "archived", "trashed"]).optional(),
+        limit: z.number().int().min(1).max(2000).optional(),
+      },
+    },
+    // @core-api-operation GET /api/occam/deals
+    async ({ q, sector, status, state, limit } = {}) => callApi(
+      "GET", buildDealSearchPath(q, { sector, status, state, limit }), undefined,
+      (result) => verifyDealSearchResult(result, { sector, status }),
+    ),
+  );
+
+  registerTool(
+    "read_deal",
+    {
+      description: "Read one Deal. Live Page is current human-visible state; Information is memory and never updates Page automatically. Read Information selectively with informationIds (full values, up to 50), informationTypes, and/or informationQuery (literal text; returns match.snippets, and values over 8,000 characters as { omitted, chars }: then read that id). Prefer these over detail=memory, which returns up to ~2 MB. Use artifactId to read original source text with page/paragraph anchors. Continue with nextOffset and source.sha256. Page field semantics come from agent_bootstrap, not every Deal read.",
+      inputSchema: {
+        dealId: z.string().min(1),
+        detail: z.enum(["overview", "memory", "files", "conversation", "history", "all"]).optional(),
+        artifactId: z.string().uuid().optional(),
+        version: z.number().int().min(1).optional(),
+        offset: z.number().int().min(0).optional(),
+        limit: z.number().int().min(1).max(50000).optional(),
+        sha256: z.string().regex(/^[a-f0-9]{64}$/).optional(),
+        informationIds: z.array(z.string().uuid()).min(1).max(50).optional(),
+        informationTypes: z.array(z.string().min(1).max(120)).min(1).max(20).optional(),
+        informationQuery: z.string().min(2).max(200).optional(),
+      },
+    },
+    async ({ dealId, detail, artifactId, informationIds, informationTypes, informationQuery, ...options }) => {
+      const filter = informationReadFilter({ ids: informationIds, types: informationTypes, q: informationQuery });
+      if (artifactId) {
+        if (detail) throw new Error("Use artifactId or detail, not both");
+        if (filter) throw new Error("Use artifactId or information filters, not both");
+        // @core-api-operation GET /api/occam/deals/{dealId}/artifacts/{artifactId}
+        return callApi("GET", buildArtifactReadPath(dealId, artifactId, options));
+      }
+      if (Object.values(options).some(value => value !== undefined)) throw new Error("Content options require artifactId");
+      // @core-api-operation GET /api/occam/deals/{dealId}
+      return callApi("GET", buildDealReadPath(dealId, detail || "overview", filter), undefined,
+        (result) => verifyInformationReadResult(result, filter));
+    },
+  );
+
+  registerTool(
+    "create_deal",
+    {
+      description: "Create one Deal intent. Core owns Drive, initial resources, idempotency, and Events.",
+      inputSchema: {
+        companyName: z.string().min(1).max(240),
+        companyKey: z.string().min(1).max(240).optional(),
+        page: z.record(z.string(), z.any()).optional(),
+        information: z.array(z.record(z.string(), z.any())).optional(),
+        origin: originSchema,
+        idempotencyKey: z.string().min(1).max(240).optional(),
+      },
+    },
+    async (input) => callApi("POST", "/api/occam/deals/commands", prepareDealCommand("create", input)),
+  );
+
+  registerTool(
+    "write_deal",
+    {
+      description: "The only Deal mutation tool. Pass one command: input.submit, information.put, page.patch, or artifact.put. A file or HTML about one company belongs here as artifact.put; standalone knowledge not tied to one company belongs in wiki_save. Before artifact.put, read Deal files: reuse artifactId for a revision; a same-kind/title collision without an ID returns OCCAM_CONFLICT. Titles are candidates, not identity. Select the intended existing ID from the request/content, or explicitly generate a fresh UUID for a distinct same-name source. Send complete revised bytes, preserve applicable metadata, and verify the ID/version. Core hosts text/html in Command; do not mirror HTML to Drive or require a Drive link. Non-HTML source files, including original transcripts and recordings, go to Drive through artifact.put. Keep source-file bodies out of Input, Information, Page and metadata; save extracted facts and summaries with source references and preserve the user request. page.patch does not edit file bytes. All Page content fields are Agent-writable; author controls attribution, not permission. Before page.patch, use get_live_deal_page_schema for the exact fields being changed and write bilingual Page prose. page.patch is JSON Merge Patch: arrays replace whole arrays, so read-modify-write and preserve sibling slots. A Llama user's own judgment is human_subjective_view.people or human_subjective_view.business and must carry value.speaker, value.rawText quoted verbatim from origin.originalUserUtterance, and value.summary (the agent's restatement); it is rejected otherwise.",
+      // MCP SDK 1.30 only publishes object schemas at the tool root. Nesting one
+      // command preserves the real discriminated union instead of flattening four
+      // incompatible operations into false affordances.
+      inputSchema: { command: writeDealCommandSchema },
+    },
+    async ({ command }) => callApi(
+      "POST",
+      "/api/occam/deals/commands",
+      prepareDealCommand("write", command),
+      (result) => compactDealWriteResult(command, result),
+    ),
+  );
+
+  // Deal Memory is a separate sidecar domain. These do not add an Occam Deal
+  // business resource or widen the deliberately closed four-tool Deal surface.
+  registerTool(
+    "get_deal_memory",
+    {
+      description: "Read the complete canonical Markdown Deal Story and its opaque concurrency version. A returned placeholder is an existing Story whose version is required for a write; only 404 means no Story exists.",
+      inputSchema: { dealId: z.string().uuid() },
+    },
+    // @core-api-operation GET /api/deal-memory/{dealId}/story
+    async ({ dealId }) => callApi("GET", buildDealMemoryPath(dealId)),
+  );
+
+  registerTool(
+    "update_deal_memory",
+    {
+      description: "Replace the complete Markdown Deal Story with one coherent current understanding; never append an update log, restate Live Deal Page/Deal Information fields, or write when understanding would not materially improve. Frontmatter must contain matching deal_id plus stable uuid and created timestamps; updated must strictly advance. Pass the version from get_deal_memory for every returned Story, including a placeholder; only 404 permits creation without expected_version.",
+      inputSchema: {
+        dealId: z.string().uuid(),
+        markdown: z.string().min(1).max(1_048_576),
+        expected_version: z.string().min(1).optional(),
+      },
+    },
+    // @core-api-operation PUT /api/deal-memory/{dealId}/story
+    async ({ dealId, markdown, expected_version }) => callApi(
+      "PUT",
+      buildDealMemoryPath(dealId),
+      { markdown, ...(expected_version ? { expected_version } : {}) },
+    ),
+  );
+
+  registerTool(
+    "agent_bootstrap",
+    {
+      description: "Mandatory before Llama work: fetch the authenticated two-part private Brain (Investment Framework V3 + Llama Command operating skill), a compact Live Deal Page schema index, runtime contract including Wiki publishing guidance, and visible Llama OS skills. Read exact Page fields separately with get_live_deal_page_schema.",
+      inputSchema: { limit: z.number().int().min(1).max(100).optional() },
+    },
+    async ({ limit } = {}) => {
+      const params = new URLSearchParams({ clientVersion: version });
+      params.set("page_schema", "progressive");
+      if (limit) params.set("limit", String(limit));
+      try {
+        const result = await request("GET", `/api/agent/manifest?${params}`);
+        return textResult(JSON.stringify(structuredBootstrapManifest(result), null, 2));
+      } catch (error) {
+        return textResult(formatErrorForDisplay(error), true);
+      }
+    },
+  );
+
+  registerTool(
+    "get_live_deal_page_schema",
+    {
+      description: "Read the Live Deal Page schema progressively. Call with no selector for the compact index; before page.patch, request only exact fields or one section. This is read-only context, not a fifth Deal action.",
+      inputSchema: {
+        fields: z.array(z.string().min(1)).min(1).max(MAX_PAGE_SCHEMA_FIELDS).optional(),
+        section: z.string().min(1).optional(),
+      },
+    },
+    async ({ fields, section } = {}) => {
+      try {
+        // @core-api-operation GET /api/agent/page-schema
+        return await callApi("GET", buildPageSchemaPath({ fields, section }));
+      } catch (error) {
+        return textResult(formatErrorForDisplay(error), true);
+      }
+    },
+  );
+
+  registerTool(
+    "skills_search",
+    {
+      description: "Search authenticated runtime skills; read only the relevant result.",
+      inputSchema: { q: z.string().min(1), limit: z.number().int().min(1).max(100).optional() },
+    },
+    async ({ q, limit }) => {
+      const params = new URLSearchParams({ q });
+      if (limit) params.set("limit", String(limit));
+      return callApi("GET", `/api/agent/skills?${params}`);
+    },
+  );
+
+  registerTool(
+    "skills_read",
+    {
+      description: "Read one authenticated runtime skill by slug.",
+      inputSchema: { slug: z.string().min(1) },
+    },
+    async ({ slug }) => callApi("GET", `/api/agent/skills/${encodeURIComponent(slug)}`),
+  );
+
+  registerTool(
+    "pref_list",
+    {
+      description: "List standing agent preferences.",
+      inputSchema: { status: z.enum(["active", "proposed", "retired", "all"]).optional() },
+    },
+    async ({ status } = {}) => {
+      const params = new URLSearchParams();
+      if (status) params.set("status", status);
+      return callApi("GET", `/api/agent/preferences${params.size ? `?${params}` : ""}`);
+    },
+  );
+
+  registerTool(
+    "pref_add",
+    {
+      description: "Save a durable user or team preference; procedures belong in skills.",
+      inputSchema: {
+        key: z.string().min(1),
+        content: z.string().min(1).max(280),
+        scope: z.enum(["user", "team"]).optional(),
+        evidence: z.string().optional(),
+      },
+    },
+    async ({ key, content, scope, evidence }) =>
+      callApi("POST", "/api/agent/preferences", { key, content, scope, evidence }),
+  );
+
+  registerTool(
+    "pref_set_status",
+    {
+      description: "Activate or retire a standing preference.",
+      inputSchema: { id: z.number().int().positive(), status: z.enum(["active", "retired"]) },
+    },
+    async ({ id, status }) => callApi("PATCH", `/api/agent/preferences/${id}`, { status }),
+  );
+
+  registerTool(
+    "object_inspect",
+    {
+      description: "Explain a Command URL or object before guessing that it is broken.",
+      inputSchema: {
+        q: z.string().optional(),
+        type: z.string().optional(),
+        id: z.string().optional(),
+        lang: z.enum(["en", "zh"]).optional(),
+      },
+    },
+    async ({ q, type, id, lang } = {}) => {
+      const params = new URLSearchParams();
+      if (q) params.set("q", q);
+      if (type) params.set("type", type);
+      if (id) params.set("id", id);
+      if (lang) params.set("lang", lang);
+      return callApi("GET", `/api/agent/explain?${params}`);
+    },
+  );
+
+  registerTool(
+    "wiki_search",
+    {
+      description: "Search institutional knowledge in the internal Wiki.",
+      inputSchema: { q: z.string().min(1) },
+    },
+    async ({ q }) => callApi("GET", `/api/wiki/search?q=${encodeURIComponent(q)}`),
+  );
+
+  registerTool(
+    "wiki_read",
+    {
+      description: "Read one Wiki article. format=text extracts its original upload or page body. attachment follows an ID listed in attachments. Continuations require offset and sha256.",
+      inputSchema: {
+        slug: z.string().min(1), lang: z.enum(["en", "zh"]).optional(),
+        format: z.literal("text").optional(), attachment: z.string().optional(),
+        offset: z.number().int().min(0).optional(), limit: z.number().int().min(1).max(50000).optional(),
+        sha256: z.string().regex(/^[a-f0-9]{64}$/).optional(),
+      },
+    },
+    // @core-api-operation GET /api/wiki/{slug}
+    async ({ slug, ...options }) => callApi("GET", buildWikiReadPath(slug, options)),
+  );
+
+  registerTool(
+    "wiki_save",
+    {
+      description: "Publish institutional knowledge when authorized. For knowledge not tied to one company; a file or HTML about one company is a Deal Artifact (write_deal artifact.put), unless the user names the Wiki. Follow agent_bootstrap contract.wiki_publishing. New pages default to complete self-contained HTML with embedded rendering assets and full report content/interactions; set content_type=html. Honor explicit Markdown requests. Read the same slug/lang before edits and preserve its format unless conversion is authorized. Verify the receipt, canonical page and interactions before reporting completion.",
+      inputSchema: {
+        slug: z.string().min(1),
+        title: z.string().min(1),
+        content: z.string().describe("Complete page source. For HTML, include the full document and embedded rendering dependencies."),
+        sources: z.array(z.string()).min(1),
+        content_type: z.enum(["markdown", "html"]).optional().describe("Set html for HTML publications. Use markdown for an explicit Markdown request or an existing Markdown article."),
+        lang: z.enum(["en", "zh"]).optional().describe("Article language; Core defaults to en when omitted."),
+      },
+    },
+    async ({ slug, title, content, sources, content_type, lang }) =>
+      callApi("POST", "/api/wiki/save", { slug, title, content, sources, content_type, lang }),
+  );
+
+  registerTool(
+    "wiki_delete",
+    {
+      description: "Soft-delete a Wiki article.",
+      inputSchema: { slug: z.string().min(1), lang: z.enum(["en", "zh"]).optional() },
+    },
+    async ({ slug, lang }) =>
+      callApi("DELETE", `/api/wiki/${encodeURIComponent(slug)}?lang=${lang === "zh" ? "zh" : "en"}`),
+  );
+
+  registerTool(
+    "wiki_restore",
+    {
+      description: "Restore a soft-deleted Wiki article.",
+      inputSchema: { slug: z.string().min(1), lang: z.enum(["en", "zh"]).optional() },
+    },
+    async ({ slug, lang }) =>
+      callApi("POST", `/api/wiki/${encodeURIComponent(slug)}/restore?lang=${lang === "zh" ? "zh" : "en"}`),
+  );
+}

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@llamaventures/cli",
-  "version": "2.6.0",
+  "version": "2.8.0",
   "description": "CLI + MCP server for the Llama Ventures investment workbench (command.llamaventures.vc).",
   "type": "module",
   "scripts": {
     "test": "npm run test:auth && npm run test:agent-routing && npm run test:contract",
     "test:agent-routing": "node scripts/verify-agent-routing.mjs",
-    "test:contract": "node --test scripts/feedback.test.mjs scripts/content-read.test.mjs scripts/build-manifest.test.mjs scripts/core-api-call-sites.test.mjs scripts/deal-actions-cli.test.mjs scripts/deal-actions.test.mjs scripts/deal-memory-actions-cli.test.mjs scripts/deal-memory-actions.test.mjs scripts/mcp-four-action-surface.test.mjs scripts/page-schema-cli.test.mjs scripts/page-schema.test.mjs scripts/server-compatibility.test.mjs scripts/verify-core-api-contract.test.mjs && node scripts/verify-core-api-contract.mjs",
+    "test:contract": "node --test scripts/wiki-publishing.test.mjs scripts/feedback.test.mjs scripts/content-read.test.mjs scripts/build-manifest.test.mjs scripts/core-api-call-sites.test.mjs scripts/deal-actions-cli.test.mjs scripts/deal-actions.test.mjs scripts/deal-memory-actions-cli.test.mjs scripts/deal-memory-actions.test.mjs scripts/mcp-four-action-surface.test.mjs scripts/page-schema-cli.test.mjs scripts/page-schema.test.mjs scripts/server-compatibility.test.mjs scripts/verify-core-api-contract.test.mjs && node scripts/verify-core-api-contract.mjs",
     "verify:artifact": "node scripts/verify-release-artifact.mjs",
     "verify:release": "npm test && npm run verify:artifact && node scripts/verify-tarball-clean.mjs",
     "prepack": "node scripts/prepare-build-manifest.mjs",