Comps, precedents, LBO → branded pitch deck, end to end. Same source as the pitch-agent Cowork plugin — this directory is the Managed Agent cookbook for POST /v1/agents.

Deploy

export ANTHROPIC_API_KEY=sk-ant-...
export CAPIQ_MCP_URL=... DALOOPA_MCP_URL=...
../../scripts/deploy-managed-agent.sh pitch-agent

Steering events

See steering-examples.json.

Security & handoffs

Task-decomposition split — less about untrusted inputs (data comes from CapIQ/Daloopa MCPs), more about parallelism and artifact isolation. Exactly one worker holds Write:

Leaf	Tools	Connectors
`researcher`	`Read`, `Grep`	CapIQ, Daloopa (read-only)
`modeler`	`Read`, `Bash` (sandboxed)	CapIQ, Daloopa (read-only)
`deck-writer` (Write-holder)	`Read`, `Write`, `Edit`	None

Artifacts land in ./out/pitch-<target>.pptx and ./out/model.xlsx via pptx-author / xlsx-author.

Handoff: to rebuild the model after a thesis change, the orchestrator emits a handoff_request for model-builder; scripts/orchestrate.py (or your workflow engine) routes it as a new steering event. See the script for the allowlist + payload-validation pattern.