@agent-pattern-labs/leads-rig 0.1.3 → 0.1.5

package/.codex/config.toml

@@ -1,4 +1,4 @@
-# generated by @razroo/iso-route — do not hand-edit
+# generated by @agent-pattern-labs/iso-route — do not hand-edit
 model = "gpt-5.4"
 model_provider = "openai"
 

package/.cursor/rules/main.mdc

@@ -9,7 +9,7 @@ Agentic public-web lead discovery harness. It crawls company domains, extracts r
 
 ## Hard Limits
 
-- [H1] Only collect public-source business contact data. Do not infer, guess, brute-force, or enrich private email addresses. Every lead needs a source URL and evidence excerpt.
+- [H1] Only collect public-source business contact data. Do not infer, guess, brute-force, or enrich private email addresses. Every lead needs a source URL and evidence excerpt. The primary goal is named people, not generic company inboxes.
 - [H2] Respect robots.txt, terms, rate limits, and site intent. If a page blocks crawling or is not public, record a warning and move on.
 - [H3] Never send outreach from this harness. The output is reviewable lead records and ingest-ready artifacts, not email campaigns.
 - [H4] Use file-backed artifacts before ingest. A subagent prose summary is not enough; write validated JSON/JSONL first, then ingest.
@@ -23,7 +23,7 @@ Agentic public-web lead discovery harness. It crawls company domains, extracts r
 - [D2] Use deterministic local helpers when they can validate, normalize, manifest, preflight, postflight, or ingest artifacts.
 - [D3] Read the active mode file before executing. Mode files own output shapes and gates.
 - [D4] Prefer official company websites and high-signal pages: home, contact, about, team, leadership, people, press, blog, careers, and legal pages.
-- [D5] Keep artifacts source-backed. Every emitted lead should include `domain`, `sourceUrl`, `evidence`, `emailType`, `extractionMethod`, `verificationStatus`, and `confidence`.
+- [D5] Keep artifacts source-backed. Every emitted lead should include `domain`, `sourceUrl`, `evidence`, `emailType`, `extractionMethod`, `verificationStatus`, and `confidence`. Reject generic catch-all inboxes such as `info@`, `hello@`, `contact@`, `support@`, `team@`, and similar aliases; if no named person is available, prefer a `contact_path` record instead.
 
 ## Procedure
 

package/.opencode/skills/lead-harness.md

@@ -41,10 +41,10 @@ Available commands:
 
 Local commands:
   npx public-leads crawl --input data/domains.tsv --out data/lead-results.json
-  npx public-leads pipeline --input data/domains.tsv --ingest --target-project /path/to/cold-agent-leads
+  npx public-leads pipeline --input data/domains.tsv --ingest
   npx public-leads validate --input data/lead-results.json
   npx public-leads manifest --input data/lead-results.json
-  npx public-leads ingest --input data/lead-results.json --target-project /path/to/cold-agent-leads
+  npx public-leads ingest --input data/lead-results.json
   npx public-leads verify
 ```
 

package/.opencode/skills/public-leads.md

@@ -41,10 +41,10 @@ Available commands:
 
 Local commands:
   npx public-leads crawl --input data/domains.tsv --out data/lead-results.json
-  npx public-leads pipeline --input data/domains.tsv --ingest --target-project /path/to/cold-agent-leads
+  npx public-leads pipeline --input data/domains.tsv --ingest
   npx public-leads validate --input data/lead-results.json
   npx public-leads manifest --input data/lead-results.json
-  npx public-leads ingest --input data/lead-results.json --target-project /path/to/cold-agent-leads
+  npx public-leads ingest --input data/lead-results.json
   npx public-leads verify
 ```
 

package/.pi/iso-route.md

@@ -0,0 +1,15 @@
+# iso-route — Pi notes
+
+Pi reads `.pi/settings.json` for the default provider/model and model cycling. It does not have native role-specific subagent binding, so role entries below are advisory for manual model switching or extension/package workflows.
+
+## Default
+
+- **anthropic / claude-sonnet-4-6**
+
+## Roles
+
+| Role | Provider | Model | Thinking | Fallback |
+| ---- | -------- | ----- | -------- | -------- |
+| `fast` | anthropic | `claude-haiku-4-5` | - | - |
+| `quality` | anthropic | `claude-opus-4-7` | high | - |
+| `minimal` | anthropic | `claude-haiku-4-5` | - | - |

package/.pi/prompts/lead-harness.md

@@ -39,10 +39,10 @@ Available commands:
 
 Local commands:
   npx public-leads crawl --input data/domains.tsv --out data/lead-results.json
-  npx public-leads pipeline --input data/domains.tsv --ingest --target-project /path/to/cold-agent-leads
+  npx public-leads pipeline --input data/domains.tsv --ingest
   npx public-leads validate --input data/lead-results.json
   npx public-leads manifest --input data/lead-results.json
-  npx public-leads ingest --input data/lead-results.json --target-project /path/to/cold-agent-leads
+  npx public-leads ingest --input data/lead-results.json
   npx public-leads verify
 ```
 

package/.pi/prompts/public-leads.md

@@ -39,10 +39,10 @@ Available commands:
 
 Local commands:
   npx public-leads crawl --input data/domains.tsv --out data/lead-results.json
-  npx public-leads pipeline --input data/domains.tsv --ingest --target-project /path/to/cold-agent-leads
+  npx public-leads pipeline --input data/domains.tsv --ingest
   npx public-leads validate --input data/lead-results.json
   npx public-leads manifest --input data/lead-results.json
-  npx public-leads ingest --input data/lead-results.json --target-project /path/to/cold-agent-leads
+  npx public-leads ingest --input data/lead-results.json
   npx public-leads verify
 ```
 

package/.pi/settings.json

@@ -0,0 +1,9 @@
+{
+  "defaultProvider": "anthropic",
+  "defaultModel": "claude-sonnet-4-6",
+  "enabledModels": [
+    "claude-sonnet-4-6",
+    "claude-haiku-4-5",
+    "claude-opus-4-7"
+  ]
+}

package/AGENTS.md

@@ -4,7 +4,7 @@ Agentic public-web lead discovery harness. It crawls company domains, extracts r
 
 ## Hard Limits
 
-- [H1] Only collect public-source business contact data. Do not infer, guess, brute-force, or enrich private email addresses. Every lead needs a source URL and evidence excerpt.
+- [H1] Only collect public-source business contact data. Do not infer, guess, brute-force, or enrich private email addresses. Every lead needs a source URL and evidence excerpt. The primary goal is named people, not generic company inboxes.
 - [H2] Respect robots.txt, terms, rate limits, and site intent. If a page blocks crawling or is not public, record a warning and move on.
 - [H3] Never send outreach from this harness. The output is reviewable lead records and ingest-ready artifacts, not email campaigns.
 - [H4] Use file-backed artifacts before ingest. A subagent prose summary is not enough; write validated JSON/JSONL first, then ingest.
@@ -18,7 +18,7 @@ Agentic public-web lead discovery harness. It crawls company domains, extracts r
 - [D2] Use deterministic local helpers when they can validate, normalize, manifest, preflight, postflight, or ingest artifacts.
 - [D3] Read the active mode file before executing. Mode files own output shapes and gates.
 - [D4] Prefer official company websites and high-signal pages: home, contact, about, team, leadership, people, press, blog, careers, and legal pages.
-- [D5] Keep artifacts source-backed. Every emitted lead should include `domain`, `sourceUrl`, `evidence`, `emailType`, `extractionMethod`, `verificationStatus`, and `confidence`.
+- [D5] Keep artifacts source-backed. Every emitted lead should include `domain`, `sourceUrl`, `evidence`, `emailType`, `extractionMethod`, `verificationStatus`, and `confidence`. Reject generic catch-all inboxes such as `info@`, `hello@`, `contact@`, `support@`, `team@`, and similar aliases; if no named person is available, prefer a `contact_path` record instead.
 
 ## Procedure
 

package/CLAUDE.md

@@ -4,7 +4,7 @@ Agentic public-web lead discovery harness. It crawls company domains, extracts r
 
 ## Hard Limits
 
-- [H1] Only collect public-source business contact data. Do not infer, guess, brute-force, or enrich private email addresses. Every lead needs a source URL and evidence excerpt.
+- [H1] Only collect public-source business contact data. Do not infer, guess, brute-force, or enrich private email addresses. Every lead needs a source URL and evidence excerpt. The primary goal is named people, not generic company inboxes.
 - [H2] Respect robots.txt, terms, rate limits, and site intent. If a page blocks crawling or is not public, record a warning and move on.
 - [H3] Never send outreach from this harness. The output is reviewable lead records and ingest-ready artifacts, not email campaigns.
 - [H4] Use file-backed artifacts before ingest. A subagent prose summary is not enough; write validated JSON/JSONL first, then ingest.
@@ -18,7 +18,7 @@ Agentic public-web lead discovery harness. It crawls company domains, extracts r
 - [D2] Use deterministic local helpers when they can validate, normalize, manifest, preflight, postflight, or ingest artifacts.
 - [D3] Read the active mode file before executing. Mode files own output shapes and gates.
 - [D4] Prefer official company websites and high-signal pages: home, contact, about, team, leadership, people, press, blog, careers, and legal pages.
-- [D5] Keep artifacts source-backed. Every emitted lead should include `domain`, `sourceUrl`, `evidence`, `emailType`, `extractionMethod`, `verificationStatus`, and `confidence`.
+- [D5] Keep artifacts source-backed. Every emitted lead should include `domain`, `sourceUrl`, `evidence`, `emailType`, `extractionMethod`, `verificationStatus`, and `confidence`. Reject generic catch-all inboxes such as `info@`, `hello@`, `contact@`, `support@`, `team@`, and similar aliases; if no named person is available, prefer a `contact_path` record instead.
 
 ## Procedure
 

package/README.md

@@ -6,11 +6,13 @@ Agentic public-web lead discovery harness for portable, source-backed lead artif
 
 - Crawls public company websites through agent workflows.
 - Produces source-backed lead artifacts matching the local lead-ingest contract.
-- Validates lead JSON/JSONL before database handoff.
+- Validates lead JSON/JSONL before database handoff and rejects generic catch-all inboxes such as `info@` and `hello@`.
 - Builds a local manifest for batch auditability.
 - Submits validated payloads to a configured ingest API.
 - Ships OpenCode, Claude Code, Cursor, Codex, and Pi harness config from one `iso/` source.
 
+The harness is optimized to find named people who can actually be contacted. When only a general company contact path exists, it should emit a `contact_path` record rather than a generic organizational inbox.
+
 ## Core Commands
 
 ```bash
@@ -20,9 +22,9 @@ npm run smoke:iso
 
 npx -p @agent-pattern-labs/leads-rig create-public-leads-harness my-lead-project
 npx public-leads crawl --domains example.com --out data/lead-results.json
-npx public-leads pipeline --input data/domains.tsv --ingest --target-project /path/to/cold-agent-leads
+PUBLIC_LEADS_API=https://cold-agent-leads.example.com npx public-leads pipeline --input data/domains.tsv --ingest
 npx public-leads validate --input examples/sample-leads.json
-npx public-leads ingest --input examples/sample-leads.json --dry-run --out output/sample-ingest.json
+PUBLIC_LEADS_API=https://cold-agent-leads.example.com npx public-leads ingest --input examples/sample-leads.json --dry-run --out output/sample-ingest.json
 batch/batch-runner.sh --help
 ```
 
@@ -32,12 +34,27 @@ The default reference client posts to the Cold Agent Leads ingest API:
 
 ```http
 POST /api/lead-ingests
-Authorization: Bearer $ADMIN_API_TOKEN
+Authorization: Bearer $PUBLIC_LEADS_API_TOKEN
 X-Admin-Email: admin@example.com
 Content-Type: application/json
 ```
 
-All endpoint details are configurable through `config/profile.yml`, CLI flags, environment variables, or `--target-project /path/to/cold-agent-leads` for reading that app's `.env` at runtime. Payloads contain `jobId`, `domains`, `leads`, `results`, and `errors`, with the schema defined in `templates/lead-schema.json`.
+For upstream ingest, set `PUBLIC_LEADS_API`, `PUBLIC_LEADS_API_TOKEN`, and `PUBLIC_LEADS_OPERATOR_EMAIL`; no local Postgres or local Cold Agent Leads server is required. Endpoint details are configurable through environment variables, `config/profile.yml`, or CLI flags. `--target-project /path/to/cold-agent-leads` remains available only as compatibility for reading a local app `.env`. Payloads contain `jobId`, `domains`, `leads`, `results`, and `errors`, with the schema defined in `templates/lead-schema.json`.
+
+Run from a Cold Agent Leads checkout without installing local package dependencies:
+
+```bash
+cd /Users/charlie/Razroo/cold-agent-leads
+export PUBLIC_LEADS_API=https://cold-agent-leads.example.com
+export PUBLIC_LEADS_API_TOKEN=...
+export PUBLIC_LEADS_OPERATOR_EMAIL=admin@example.com
+npx -p @agent-pattern-labs/leads-rig public-leads pipeline \
+  --domains example.com \
+  --ingest \
+  --out data/lead-results.json \
+  --manifest data/lead-manifest.json \
+  --ingest-out data/ingest-response.json
+```
 
 Legacy aliases `lead-harness` and `create-leads-harness` remain available for compatibility.
 
@@ -53,7 +70,7 @@ gh run watch
 You can also publish by creating a GitHub release for the package version:
 
 ```bash
-gh release create v0.1.3 --title v0.1.3 --generate-notes
+gh release create v0.1.4 --title v0.1.4 --generate-notes
 ```
 
 The package version must not already exist on npm.

package/bin/create-leads-harness.mjs

@@ -51,7 +51,7 @@ write('package.json', JSON.stringify({
     'update-harness': 'npm install @agent-pattern-labs/leads-rig@latest && public-leads sync',
   },
   dependencies: {
-    '@agent-pattern-labs/leads-rig': '^0.1.3',
+    '@agent-pattern-labs/leads-rig': '^0.1.4',
   },
   engines: {
     node: '>=20.6.0',
@@ -143,7 +143,7 @@ npm run verify
 opencode
 \`\`\`
 
-Update \`config/profile.yml\` with your ingest API settings and add domains to \`data/domains.tsv\` or \`data/pipeline.md\`.
+Set \`PUBLIC_LEADS_API\`, \`PUBLIC_LEADS_API_TOKEN\`, and \`PUBLIC_LEADS_OPERATOR_EMAIL\` for upstream ingest. Add domains to \`data/domains.tsv\` or \`data/pipeline.md\`.
 `);
 
 console.log('\nNext: npm install, then edit config/profile.yml and data/domains.tsv.\n');

package/bin/lead-harness.mjs

@@ -23,80 +23,80 @@ const commands = {
 };
 
 const helperAliases = {
-  'trace:list': ['@razroo/iso-trace', 'list'],
-  'trace:stats': ['@razroo/iso-trace', 'stats'],
-  'trace:show': ['@razroo/iso-trace', 'show'],
-  'guard:audit': ['@razroo/iso-guard', 'audit'],
-  'guard:explain': ['@razroo/iso-guard', 'explain'],
-  'ledger:status': ['@razroo/iso-ledger', 'status'],
-  'ledger:rebuild': ['@razroo/iso-ledger', 'rebuild'],
-  'ledger:verify': ['@razroo/iso-ledger', 'verify'],
-  'capabilities:list': ['@razroo/iso-capabilities', 'list'],
-  'capabilities:explain': ['@razroo/iso-capabilities', 'explain'],
-  'capabilities:check': ['@razroo/iso-capabilities', 'check'],
-  'context:list': ['@razroo/iso-context', 'list'],
-  'context:explain': ['@razroo/iso-context', 'explain'],
-  'context:plan': ['@razroo/iso-context', 'plan'],
-  'context:check': ['@razroo/iso-context', 'check'],
-  'context:render': ['@razroo/iso-context', 'render'],
-  'cache:key': ['@razroo/iso-cache', 'key'],
-  'cache:has': ['@razroo/iso-cache', 'has'],
-  'cache:get': ['@razroo/iso-cache', 'get'],
-  'cache:put': ['@razroo/iso-cache', 'put'],
-  'cache:status': ['@razroo/iso-cache', 'status'],
-  'cache:list': ['@razroo/iso-cache', 'list'],
-  'cache:verify': ['@razroo/iso-cache', 'verify'],
-  'cache:prune': ['@razroo/iso-cache', 'prune'],
-  'index:build': ['@razroo/iso-index', 'build'],
-  'index:status': ['@razroo/iso-index', 'status'],
-  'index:query': ['@razroo/iso-index', 'query'],
-  'index:has': ['@razroo/iso-index', 'has'],
-  'index:verify': ['@razroo/iso-index', 'verify'],
-  'facts:build': ['@razroo/iso-facts', 'build'],
-  'facts:status': ['@razroo/iso-facts', 'status'],
-  'facts:query': ['@razroo/iso-facts', 'query'],
-  'facts:has': ['@razroo/iso-facts', 'has'],
-  'facts:verify': ['@razroo/iso-facts', 'verify'],
-  'score:compute': ['@razroo/iso-score', 'compute'],
-  'score:verify': ['@razroo/iso-score', 'verify'],
-  'score:check': ['@razroo/iso-score', 'check'],
-  'score:gate': ['@razroo/iso-score', 'gate'],
-  'score:compare': ['@razroo/iso-score', 'compare'],
-  'score:explain': ['@razroo/iso-score', 'explain'],
-  'canon:normalize': ['@razroo/iso-canon', 'normalize'],
-  'canon:key': ['@razroo/iso-canon', 'key'],
-  'canon:compare': ['@razroo/iso-canon', 'compare'],
-  'canon:explain': ['@razroo/iso-canon', 'explain'],
-  'preflight:plan': ['@razroo/iso-preflight', 'plan'],
-  'preflight:check': ['@razroo/iso-preflight', 'check'],
-  'preflight:explain': ['@razroo/iso-preflight', 'explain'],
-  'postflight:status': ['@razroo/iso-postflight', 'status'],
-  'postflight:check': ['@razroo/iso-postflight', 'check'],
-  'postflight:explain': ['@razroo/iso-postflight', 'explain'],
-  'timeline:status': ['@razroo/iso-timeline', 'status'],
-  'timeline:build': ['@razroo/iso-timeline', 'build'],
-  'timeline:plan': ['@razroo/iso-timeline', 'plan'],
-  'timeline:due': ['@razroo/iso-timeline', 'due'],
-  'timeline:check': ['@razroo/iso-timeline', 'check'],
-  'timeline:verify': ['@razroo/iso-timeline', 'verify'],
-  'prioritize:status': ['@razroo/iso-prioritize', 'status'],
-  'prioritize:items': ['@razroo/iso-prioritize', 'items'],
-  'prioritize:build': ['@razroo/iso-prioritize', 'build'],
-  'prioritize:rank': ['@razroo/iso-prioritize', 'rank'],
-  'prioritize:select': ['@razroo/iso-prioritize', 'select'],
-  'prioritize:check': ['@razroo/iso-prioritize', 'check'],
-  'prioritize:verify': ['@razroo/iso-prioritize', 'verify'],
-  'lineage:status': ['@razroo/iso-lineage', 'status'],
-  'lineage:record': ['@razroo/iso-lineage', 'record'],
-  'lineage:check': ['@razroo/iso-lineage', 'check'],
-  'lineage:stale': ['@razroo/iso-lineage', 'stale'],
-  'lineage:verify': ['@razroo/iso-lineage', 'verify'],
-  'redact:scan': ['@razroo/iso-redact', 'scan'],
-  'redact:verify': ['@razroo/iso-redact', 'verify'],
-  'redact:apply': ['@razroo/iso-redact', 'apply'],
-  'migrate:plan': ['@razroo/iso-migrate', 'plan'],
-  'migrate:apply': ['@razroo/iso-migrate', 'apply'],
-  'migrate:check': ['@razroo/iso-migrate', 'check'],
+  'trace:list': ['@agent-pattern-labs/iso-trace', 'list'],
+  'trace:stats': ['@agent-pattern-labs/iso-trace', 'stats'],
+  'trace:show': ['@agent-pattern-labs/iso-trace', 'show'],
+  'guard:audit': ['@agent-pattern-labs/iso-guard', 'audit'],
+  'guard:explain': ['@agent-pattern-labs/iso-guard', 'explain'],
+  'ledger:status': ['@agent-pattern-labs/iso-ledger', 'status'],
+  'ledger:rebuild': ['@agent-pattern-labs/iso-ledger', 'rebuild'],
+  'ledger:verify': ['@agent-pattern-labs/iso-ledger', 'verify'],
+  'capabilities:list': ['@agent-pattern-labs/iso-capabilities', 'list'],
+  'capabilities:explain': ['@agent-pattern-labs/iso-capabilities', 'explain'],
+  'capabilities:check': ['@agent-pattern-labs/iso-capabilities', 'check'],
+  'context:list': ['@agent-pattern-labs/iso-context', 'list'],
+  'context:explain': ['@agent-pattern-labs/iso-context', 'explain'],
+  'context:plan': ['@agent-pattern-labs/iso-context', 'plan'],
+  'context:check': ['@agent-pattern-labs/iso-context', 'check'],
+  'context:render': ['@agent-pattern-labs/iso-context', 'render'],
+  'cache:key': ['@agent-pattern-labs/iso-cache', 'key'],
+  'cache:has': ['@agent-pattern-labs/iso-cache', 'has'],
+  'cache:get': ['@agent-pattern-labs/iso-cache', 'get'],
+  'cache:put': ['@agent-pattern-labs/iso-cache', 'put'],
+  'cache:status': ['@agent-pattern-labs/iso-cache', 'status'],
+  'cache:list': ['@agent-pattern-labs/iso-cache', 'list'],
+  'cache:verify': ['@agent-pattern-labs/iso-cache', 'verify'],
+  'cache:prune': ['@agent-pattern-labs/iso-cache', 'prune'],
+  'index:build': ['@agent-pattern-labs/iso-index', 'build'],
+  'index:status': ['@agent-pattern-labs/iso-index', 'status'],
+  'index:query': ['@agent-pattern-labs/iso-index', 'query'],
+  'index:has': ['@agent-pattern-labs/iso-index', 'has'],
+  'index:verify': ['@agent-pattern-labs/iso-index', 'verify'],
+  'facts:build': ['@agent-pattern-labs/iso-facts', 'build'],
+  'facts:status': ['@agent-pattern-labs/iso-facts', 'status'],
+  'facts:query': ['@agent-pattern-labs/iso-facts', 'query'],
+  'facts:has': ['@agent-pattern-labs/iso-facts', 'has'],
+  'facts:verify': ['@agent-pattern-labs/iso-facts', 'verify'],
+  'score:compute': ['@agent-pattern-labs/iso-score', 'compute'],
+  'score:verify': ['@agent-pattern-labs/iso-score', 'verify'],
+  'score:check': ['@agent-pattern-labs/iso-score', 'check'],
+  'score:gate': ['@agent-pattern-labs/iso-score', 'gate'],
+  'score:compare': ['@agent-pattern-labs/iso-score', 'compare'],
+  'score:explain': ['@agent-pattern-labs/iso-score', 'explain'],
+  'canon:normalize': ['@agent-pattern-labs/iso-canon', 'normalize'],
+  'canon:key': ['@agent-pattern-labs/iso-canon', 'key'],
+  'canon:compare': ['@agent-pattern-labs/iso-canon', 'compare'],
+  'canon:explain': ['@agent-pattern-labs/iso-canon', 'explain'],
+  'preflight:plan': ['@agent-pattern-labs/iso-preflight', 'plan'],
+  'preflight:check': ['@agent-pattern-labs/iso-preflight', 'check'],
+  'preflight:explain': ['@agent-pattern-labs/iso-preflight', 'explain'],
+  'postflight:status': ['@agent-pattern-labs/iso-postflight', 'status'],
+  'postflight:check': ['@agent-pattern-labs/iso-postflight', 'check'],
+  'postflight:explain': ['@agent-pattern-labs/iso-postflight', 'explain'],
+  'timeline:status': ['@agent-pattern-labs/iso-timeline', 'status'],
+  'timeline:build': ['@agent-pattern-labs/iso-timeline', 'build'],
+  'timeline:plan': ['@agent-pattern-labs/iso-timeline', 'plan'],
+  'timeline:due': ['@agent-pattern-labs/iso-timeline', 'due'],
+  'timeline:check': ['@agent-pattern-labs/iso-timeline', 'check'],
+  'timeline:verify': ['@agent-pattern-labs/iso-timeline', 'verify'],
+  'prioritize:status': ['@agent-pattern-labs/iso-prioritize', 'status'],
+  'prioritize:items': ['@agent-pattern-labs/iso-prioritize', 'items'],
+  'prioritize:build': ['@agent-pattern-labs/iso-prioritize', 'build'],
+  'prioritize:rank': ['@agent-pattern-labs/iso-prioritize', 'rank'],
+  'prioritize:select': ['@agent-pattern-labs/iso-prioritize', 'select'],
+  'prioritize:check': ['@agent-pattern-labs/iso-prioritize', 'check'],
+  'prioritize:verify': ['@agent-pattern-labs/iso-prioritize', 'verify'],
+  'lineage:status': ['@agent-pattern-labs/iso-lineage', 'status'],
+  'lineage:record': ['@agent-pattern-labs/iso-lineage', 'record'],
+  'lineage:check': ['@agent-pattern-labs/iso-lineage', 'check'],
+  'lineage:stale': ['@agent-pattern-labs/iso-lineage', 'stale'],
+  'lineage:verify': ['@agent-pattern-labs/iso-lineage', 'verify'],
+  'redact:scan': ['@agent-pattern-labs/iso-redact', 'scan'],
+  'redact:verify': ['@agent-pattern-labs/iso-redact', 'verify'],
+  'redact:apply': ['@agent-pattern-labs/iso-redact', 'apply'],
+  'migrate:plan': ['@agent-pattern-labs/iso-migrate', 'plan'],
+  'migrate:apply': ['@agent-pattern-labs/iso-migrate', 'apply'],
+  'migrate:check': ['@agent-pattern-labs/iso-migrate', 'check'],
 };
 
 const [, , cmd, ...rest] = process.argv;
@@ -161,7 +161,7 @@ function runIsoCli(pkgName, args) {
 
 function defaultIsoArgs(pkgName, subcommand, args) {
   const defaults = [];
-  if (pkgName === '@razroo/iso-trace') {
+  if (pkgName === '@agent-pattern-labs/iso-trace') {
     if (!hasFlag(args, '--cwd')) defaults.push('--cwd', PROJECT_DIR);
     if ((subcommand === 'list' || subcommand === 'stats') && !hasFlag(args, '--since')) {
       defaults.push('--since', '7d');

package/config/profile.example.yml

@@ -2,16 +2,19 @@
 # Prefer environment variables for secrets in shared terminals.
 
 api:
-  # Cold Agent Leads local API default. Set target_project to a local
-  # cold-agent-leads checkout to read ADMIN_API_TOKEN/ADMIN_EMAILS from .env.
-  base_url: "http://localhost:8080"
+  # Set the deployed Cold Agent Leads API base URL through PUBLIC_LEADS_API,
+  # or put it here for a non-shared local profile. Example:
+  # base_url: "https://cold-agent-leads.example.com"
+  base_url: ""
   ingest_path: "/api/lead-ingests"
+  # Optional compatibility only: set when reading ADMIN_API_TOKEN/ADMIN_EMAILS
+  # from a local cold-agent-leads checkout. Not needed for upstream ingest.
   target_project: ""
-  operator_email: "admin@example.com"
+  operator_email: ""
   operator_email_header: "X-Admin-Email"
   auth_header: "Authorization"
   auth_scheme: "Bearer"
-  auth_token_env: "ADMIN_API_TOKEN"
+  auth_token_env: "PUBLIC_LEADS_API_TOKEN"
 
 crawl:
   max_pages: 10

package/docs/ARCHITECTURE.md

@@ -68,10 +68,10 @@ domain input
 | `scripts/validate-leads.mjs` | Normalizes and validates JSON/JSONL lead artifacts |
 | `scripts/manifest.mjs` | Records validated batches in `data/lead-manifest.json` |
 | `scripts/ingest.mjs` | Posts to the configured ingest endpoint |
-| `scripts/batch-orchestrator.mjs` | Durable batch runner using `@razroo/iso-orchestrator` |
+| `scripts/batch-orchestrator.mjs` | Durable batch runner using `@agent-pattern-labs/iso-orchestrator` |
 | `verify-pipeline.mjs` | Repo/consumer health gate |
 
-The package also carries the `@razroo/iso-*` helper ecosystem for trace, guard, ledger, cache, canon, context, preflight, postflight, prioritize, lineage, redact, migrate, score, and timeline commands.
+The package also carries the `@agent-pattern-labs/iso-*` helper ecosystem for trace, guard, ledger, cache, canon, context, preflight, postflight, prioritize, lineage, redact, migrate, score, and timeline commands.
 
 ## Data Contract
 
@@ -82,4 +82,4 @@ The package also carries the `@razroo/iso-*` helper ecosystem for trace, guard,
 - page visits
 - ingest requests
 
-The validator intentionally accepts the same defaults the local runtime normalizes, but it fails missing source evidence, invalid URL fields, invalid `emailType`, invalid `verificationStatus`, invalid confidence, and person/role leads without email.
+The validator intentionally accepts the same defaults the local runtime normalizes, but it fails missing source evidence, invalid URL fields, invalid `emailType`, invalid `verificationStatus`, invalid confidence, person/role leads without email, and generic catch-all inboxes such as `info@`, `hello@`, or similar organizational aliases.

package/docs/CONSTRUCTION.md

@@ -14,7 +14,7 @@
 | Deterministic helpers | `scripts/crawl.mjs`, `scripts/pipeline.mjs`, `scripts/validate-leads.mjs`, `scripts/manifest.mjs`, `scripts/ingest.mjs`, `scripts/batch-orchestrator.mjs` |
 | Consumer scaffold | `create-public-leads-harness <dir>` writes local config, input, output, and ignore files |
 | Consumer sync | `public-leads sync` symlinks shared harness files from the installed package |
-| Batch orchestration | `batch/batch-runner.sh` delegates to `@razroo/iso-orchestrator` with bounded parallelism |
+| Batch orchestration | `batch/batch-runner.sh` delegates to `@agent-pattern-labs/iso-orchestrator` with bounded parallelism |
 | Verification gates | `npm run verify`, `npm run smoke:iso`, sample validate/manifest/ingest, `npm pack` |
 
 ## Maintainer Rules
@@ -37,4 +37,4 @@
 6. Run `npm audit`.
 7. Run `npm pack` and confirm generated runtime surfaces are included.
 8. Scaffold a clean consumer project and test install-time sync from the packed package or source tree.
-9. Publish through GitHub Actions with `gh workflow run publish.yml --ref main`, or create a published release with `gh release create v0.1.3 --title v0.1.3 --generate-notes`.
+9. Publish through GitHub Actions with `gh workflow run publish.yml --ref main`, or create a published release with `gh release create v0.1.4 --title v0.1.4 --generate-notes`.

package/docs/SETUP.md

@@ -32,7 +32,9 @@ Then edit:
 Use environment variables for secrets:
 
 ```bash
-export ADMIN_API_TOKEN=...
+export PUBLIC_LEADS_API=https://cold-agent-leads.example.com
+export PUBLIC_LEADS_API_TOKEN=...
+export PUBLIC_LEADS_OPERATOR_EMAIL=admin@example.com
 ```
 
 ## Validate A Payload
@@ -51,27 +53,43 @@ npx public-leads pipeline --input data/domains.tsv --out data/lead-results.json
 ## Dry-Run Ingest
 
 ```bash
-npx public-leads ingest --input examples/sample-leads.json --dry-run --out output/sample-ingest.json
+PUBLIC_LEADS_API=https://cold-agent-leads.example.com npx public-leads ingest --input examples/sample-leads.json --dry-run --out output/sample-ingest.json
 ```
 
 ## Live Ingest
 
 ```bash
-npx public-leads pipeline --input data/domains.tsv --ingest --target-project /path/to/cold-agent-leads
-npx public-leads ingest --input data/lead-results.json --target-project /path/to/cold-agent-leads
+npx public-leads pipeline --input data/domains.tsv --ingest
+npx public-leads ingest --input data/lead-results.json
+```
+
+Run from `/Users/charlie/Razroo/cold-agent-leads` without local Postgres or a local API:
+
+```bash
+cd /Users/charlie/Razroo/cold-agent-leads
+export PUBLIC_LEADS_API=https://cold-agent-leads.example.com
+export PUBLIC_LEADS_API_TOKEN=...
+export PUBLIC_LEADS_OPERATOR_EMAIL=admin@example.com
+npx -p @agent-pattern-labs/leads-rig public-leads pipeline \
+  --domains example.com \
+  --ingest \
+  --out data/lead-results.json \
+  --manifest data/lead-manifest.json \
+  --ingest-out data/ingest-response.json
 ```
 
 Required request settings come from flags, environment, or `config/profile.yml`:
 
 - `api.base_url`
 - `api.ingest_path`
-- `api.target_project`
 - `api.operator_email`
 - `api.operator_email_header`
 - `api.auth_header`
 - `api.auth_scheme`
 - `api.auth_token_env`
 
+Use `api.target_project` only when intentionally reading credentials from a local Cold Agent Leads checkout. Upstream ingest should use `PUBLIC_LEADS_API`, `PUBLIC_LEADS_API_TOKEN`, and `PUBLIC_LEADS_OPERATOR_EMAIL`.
+
 ## Batch
 
 Create `batch/batch-input.tsv`:

package/iso/commands/lead-harness.md

@@ -44,10 +44,10 @@ Available commands:
 
 Local commands:
   npx public-leads crawl --input data/domains.tsv --out data/lead-results.json
-  npx public-leads pipeline --input data/domains.tsv --ingest --target-project /path/to/cold-agent-leads
+  npx public-leads pipeline --input data/domains.tsv --ingest
   npx public-leads validate --input data/lead-results.json
   npx public-leads manifest --input data/lead-results.json
-  npx public-leads ingest --input data/lead-results.json --target-project /path/to/cold-agent-leads
+  npx public-leads ingest --input data/lead-results.json
   npx public-leads verify
 ```
 

package/iso/commands/public-leads.md

@@ -44,10 +44,10 @@ Available commands:
 
 Local commands:
   npx public-leads crawl --input data/domains.tsv --out data/lead-results.json
-  npx public-leads pipeline --input data/domains.tsv --ingest --target-project /path/to/cold-agent-leads
+  npx public-leads pipeline --input data/domains.tsv --ingest
   npx public-leads validate --input data/lead-results.json
   npx public-leads manifest --input data/lead-results.json
-  npx public-leads ingest --input data/lead-results.json --target-project /path/to/cold-agent-leads
+  npx public-leads ingest --input data/lead-results.json
   npx public-leads verify
 ```
 

package/iso/instructions.md

@@ -4,7 +4,7 @@ Agentic public-web lead discovery harness. It crawls company domains, extracts r
 
 ## Hard Limits
 
-- [H1] Only collect public-source business contact data. Do not infer, guess, brute-force, or enrich private email addresses. Every lead needs a source URL and evidence excerpt.
+- [H1] Only collect public-source business contact data. Do not infer, guess, brute-force, or enrich private email addresses. Every lead needs a source URL and evidence excerpt. The primary goal is named people, not generic company inboxes.
 - [H2] Respect robots.txt, terms, rate limits, and site intent. If a page blocks crawling or is not public, record a warning and move on.
 - [H3] Never send outreach from this harness. The output is reviewable lead records and ingest-ready artifacts, not email campaigns.
 - [H4] Use file-backed artifacts before ingest. A subagent prose summary is not enough; write validated JSON/JSONL first, then ingest.
@@ -18,7 +18,7 @@ Agentic public-web lead discovery harness. It crawls company domains, extracts r
 - [D2] Use deterministic local helpers when they can validate, normalize, manifest, preflight, postflight, or ingest artifacts.
 - [D3] Read the active mode file before executing. Mode files own output shapes and gates.
 - [D4] Prefer official company websites and high-signal pages: home, contact, about, team, leadership, people, press, blog, careers, and legal pages.
-- [D5] Keep artifacts source-backed. Every emitted lead should include `domain`, `sourceUrl`, `evidence`, `emailType`, `extractionMethod`, `verificationStatus`, and `confidence`.
+- [D5] Keep artifacts source-backed. Every emitted lead should include `domain`, `sourceUrl`, `evidence`, `emailType`, `extractionMethod`, `verificationStatus`, and `confidence`. Reject generic catch-all inboxes such as `info@`, `hello@`, `contact@`, `support@`, `team@`, and similar aliases; if no named person is available, prefer a `contact_path` record instead.
 
 ## Procedure