@sonnechasser/ntrp 1.4.9 → 1.5.1

package/dist/index.js

@@ -6587,6 +6587,10 @@ function stripTools(req) {
   return rest;
 }
 async function outboundRequest(req) {
+  if (req.skipPseudonymize) {
+    const { skipPseudonymize: _drop, ...rest } = req;
+    return rest;
+  }
   await ensureLexiconSeeded();
   return protectRequest(req);
 }
@@ -6848,13 +6852,14 @@ var init_failover = __esm({
 });
 
 // src/ai/llm/complete.ts
-async function llmCompleteText(surface, system, userMessage, max_tokens, ctx) {
+async function llmCompleteText(surface, system, userMessage, max_tokens, ctx, opts = {}) {
   const { response, meta } = await completeWithFailover(
     {
       surface,
       system,
       messages: [{ role: "user", content: userMessage }],
-      max_tokens
+      max_tokens,
+      ...opts.skipPseudonymize ? { skipPseudonymize: true } : {}
     },
     { ctx }
   );
@@ -22822,9 +22827,9 @@ async function handleGetSessionBrief(input) {
   if (!target) {
     return { error: `No session matching "${raw}".` };
   }
-  const { existsSync: existsSync36, readFileSync: readFileSync24 } = await import("fs");
+  const { existsSync: existsSync38, readFileSync: readFileSync24 } = await import("fs");
   const briefPath = contextDocPathForSession2(target.id);
-  if (!existsSync36(briefPath)) {
+  if (!existsSync38(briefPath)) {
     return {
       session_id: target.id,
       error: "No context brief on disk for this session (created before brief storage existed).",
@@ -24277,20 +24282,128 @@ var init_diagnose = __esm({
 });
 
 // src/ai/profile-draft.ts
-async function draftCompanyProfile(seed, _ctx) {
+async function draftCompanyProfile(seed, ctx, opts = {}) {
   if (!seed.company_url && !seed.company_name) {
     throw new Error("draftCompanyProfile requires a URL or a company name");
   }
-  seedOperatorIdentity(seed.company_name, seed.company_url);
+  const wantResearch = opts.research === true || opts.research !== false && hasAnyLlmProvider();
+  if (!wantResearch) {
+    seedOperatorIdentity(seed.company_name, seed.company_url);
+    const out = {};
+    if (seed.company_name?.trim()) out.company_name = seed.company_name.trim();
+    if (seed.company_url) out.company_url = seed.company_url;
+    return out;
+  }
+  if (!ctx) {
+    throw new Error("draftCompanyProfile research requires a Context");
+  }
+  assertReplAi(ctx);
+  const inputBlock = seed.company_url ? `Company website: ${seed.company_url}${seed.company_name ? `
+Company name (hint): ${seed.company_name}` : ""}` : `Company name: ${seed.company_name}`;
+  const userMessage = `${inputBlock}
+
+Research this company deeply using your training knowledge. Identify the canonical company name, what they sell, who buys it, and how they sell it. Emit the profile now as STRICT JSON.`;
+  const { text } = await llmCompleteText("onboard", SYSTEM_PROMPT4, userMessage, 2048, ctx, {
+    skipPseudonymize: true
+  });
+  const cleaned = stripFences3(text);
+  let parsed;
+  try {
+    parsed = JSON.parse(cleaned);
+  } catch {
+    throw new Error("AI response is not valid JSON");
+  }
+  const draft = validateDraft(parsed);
+  const nameForLexicon = draft.company_name ?? seed.company_name;
+  seedOperatorIdentity(nameForLexicon, seed.company_url);
+  if (seed.company_url && !draft.company_url) draft.company_url = seed.company_url;
+  return draft;
+}
+function stripFences3(text) {
+  const trimmed = text.trim();
+  const fenced = trimmed.match(/```(?:json)?\s*([\s\S]*?)\s*```/i);
+  if (fenced) return fenced[1].trim();
+  return trimmed;
+}
+function validateDraft(raw) {
   const out = {};
-  if (seed.company_name?.trim()) out.company_name = seed.company_name.trim();
-  if (seed.company_url) out.company_url = seed.company_url;
+  const str2 = (k) => {
+    const v = raw[k];
+    return typeof v === "string" && v.trim().length > 0 ? v.trim() : void 0;
+  };
+  const companyName = str2("company_name");
+  if (companyName) out.company_name = companyName;
+  const industry = str2("industry");
+  if (industry) out.industry = industry;
+  const productDescription = str2("product_description");
+  if (productDescription) out.product_description = productDescription;
+  const targetCustomer = str2("target_customer");
+  if (targetCustomer) out.target_customer = targetCustomer;
+  const motion = str2("sales_motion")?.toLowerCase();
+  if (motion && ALLOWED_MOTIONS.has(motion)) {
+    out.sales_motion = motion;
+  }
+  const dealSize = str2("average_deal_size");
+  if (dealSize) out.average_deal_size = dealSize;
+  const cycleDays = raw["sales_cycle_days"];
+  if (typeof cycleDays === "number" && Number.isFinite(cycleDays) && cycleDays > 0) {
+    out.sales_cycle_days = Math.round(cycleDays);
+  }
+  const crm = str2("primary_crm")?.toLowerCase();
+  if (crm && ALLOWED_CRMS.has(crm)) out.primary_crm = crm;
+  const engagement = str2("engagement_tool")?.toLowerCase();
+  if (engagement && ALLOWED_ENGAGEMENT.has(engagement)) out.engagement_tool = engagement;
   return out;
 }
+var SYSTEM_PROMPT4, ALLOWED_MOTIONS, ALLOWED_CRMS, ALLOWED_ENGAGEMENT;
 var init_profile_draft = __esm({
   "src/ai/profile-draft.ts"() {
     "use strict";
+    init_repl_api();
+    init_complete();
     init_lexicon_seed();
+    SYSTEM_PROMPT4 = `You are a senior GTM researcher with deep recall of the B2B / SaaS / services landscape. Given a company website (or, as a fallback, a plain company name), you produce a rich, specific profile of the business so a pipeline-health tool can tailor every answer to their reality.
+
+RESEARCH DEPTH \u2014 this is the most important part:
+- Recognize the company from your training knowledge whenever possible. Pull on everything you know: product line, founding story, funding stage, acquisitions, known customers, pricing tiers, sales process, typical buyer titles, competitive landscape.
+- When you don't recognize the exact company, infer aggressively but conservatively from the URL, TLD, subdomain, naming conventions, and any industry signals. A domain like "acmedental.com" strongly suggests dental-industry B2B; "quantumledger.io" suggests a fintech/SaaS.
+- Think about the shape of their GTM: do they sell top-down to CIOs (enterprise), bottom-up to developers (PLG), to SMB owners (velocity), or mid-market (structured)?
+- Identify the most probable sales motion. Your guess becomes the wizard's default.
+- For known companies, be specific: reference real product names, real ICP, real buyer personas. For unknown ones, be honest \u2014 use generic-but-plausible descriptors and keep dollar figures as ranges.
+- NEVER invent specific revenue figures, customer counts, or headcount numbers. Stick to public ranges ("$5K-$50K ACV", "~$250K+ ACV", "mid-market $20M-$200M revenue", etc.).
+
+FIELDS \u2014 emit only the ones you're reasonably confident about; the wizard will ask the user interactively for anything you omit.
+
+REQUIRED (emit these whenever possible):
+- company_name: string \u2014 the canonical marketed name of the company (e.g. "HashiCorp", not "hashicorp.com")
+- industry: string \u2014 very specific; include both category and sub-category (e.g. "B2B SaaS \u2014 infrastructure automation / developer tools", "B2B services \u2014 dental lab equipment & supplies", "Fintech \u2014 B2B embedded payments")
+- product_description: string \u2014 2-4 sentences describing what they sell, who pays for it, and how it's delivered (SaaS subscription, hardware + service, self-serve, etc.)
+- target_customer: string \u2014 plain-English ICP: company size, geography, persona titles, deal triggers. Be specific.
+- sales_motion: "plg" | "smb_velocity" | "mid_market" | "enterprise" \u2014 the motion most consistent with the product + ICP
+
+OPTIONAL (include only with reasonable confidence):
+- average_deal_size: string \u2014 a range like "$5K-$50K ACV", "$45K-$120K (hardware + year 1 software)", "$250K+"
+- sales_cycle_days: integer \u2014 median cycle length in days
+- primary_crm: "salesforce" | "hubspot" | "pipedrive" | "other" \u2014 only with a signal (brand tier, pricing, known choice)
+- engagement_tool: "outreach" | "salesloft" | "apollo" | "none" \u2014 same bar
+
+OUTPUT FORMAT \u2014 respond with STRICT JSON only, no preamble, no markdown fences, no commentary:
+{
+  "company_name": "string",
+  "industry": "string",
+  "product_description": "string",
+  "target_customer": "string",
+  "sales_motion": "plg" | "smb_velocity" | "mid_market" | "enterprise",
+  "average_deal_size": "string",
+  "sales_cycle_days": number,
+  "primary_crm": "salesforce" | "hubspot" | "pipedrive" | "other",
+  "engagement_tool": "outreach" | "salesloft" | "apollo" | "none"
+}
+
+Any field you are not confident about MUST be omitted entirely (do not include it as null, empty string, or "unknown"). The wizard will fall through to scripted Q&A to fill gaps.`;
+    ALLOWED_MOTIONS = /* @__PURE__ */ new Set(["plg", "smb_velocity", "mid_market", "enterprise"]);
+    ALLOWED_CRMS = /* @__PURE__ */ new Set(["salesforce", "hubspot", "pipedrive", "other"]);
+    ALLOWED_ENGAGEMENT = /* @__PURE__ */ new Set(["outreach", "salesloft", "apollo", "none"]);
   }
 });
 
@@ -24532,7 +24645,7 @@ OUTPUT \u2014 STRICT JSON only, no fences, no commentary:
 });
 
 // src/ai/profile-clarify.ts
-function stripFences3(text) {
+function stripFences4(text) {
   const trimmed = text.trim();
   const fenced = trimmed.match(/```(?:json)?\s*([\s\S]*?)\s*```/i);
   if (fenced) return fenced[1].trim();
@@ -24552,7 +24665,7 @@ function formatDraft(draft) {
   return parts.join("\n");
 }
 function parseClarifyingQuestions(text) {
-  const cleaned = stripFences3(text);
+  const cleaned = stripFences4(text);
   let parsed;
   try {
     parsed = JSON.parse(cleaned);
@@ -24649,7 +24762,7 @@ ${draftBlock}${userBlock}${answersBlock}
 
 Emit the refined profile now as STRICT JSON.`;
   const { text } = await llmCompleteText("onboard", REFINE_SYSTEM_PROMPT, userMessage, 2048, ctx);
-  const cleaned = stripFences3(text);
+  const cleaned = stripFences4(text);
   let parsed;
   try {
     parsed = JSON.parse(cleaned);
@@ -24671,7 +24784,7 @@ function validateRefined(raw) {
   const targetCustomer = str2("target_customer");
   if (targetCustomer) out.target_customer = targetCustomer;
   const motion = str2("sales_motion")?.toLowerCase();
-  if (motion && ALLOWED_MOTIONS.has(motion)) {
+  if (motion && ALLOWED_MOTIONS2.has(motion)) {
     out.sales_motion = motion;
   }
   const dealSize = str2("average_deal_size");
@@ -24681,14 +24794,14 @@ function validateRefined(raw) {
     out.sales_cycle_days = Math.round(cycleDays);
   }
   const crm = str2("primary_crm")?.toLowerCase();
-  if (crm && ALLOWED_CRMS.has(crm)) out.primary_crm = crm;
+  if (crm && ALLOWED_CRMS2.has(crm)) out.primary_crm = crm;
   const engagement = str2("engagement_tool")?.toLowerCase();
-  if (engagement && ALLOWED_ENGAGEMENT.has(engagement)) out.engagement_tool = engagement;
+  if (engagement && ALLOWED_ENGAGEMENT2.has(engagement)) out.engagement_tool = engagement;
   const userScope = str2("user_scope");
   if (userScope) out.user_scope = userScope;
   return out;
 }
-var CLARIFY_SYSTEM_PROMPT, REFINE_SYSTEM_PROMPT, ALLOWED_MOTIONS, ALLOWED_CRMS, ALLOWED_ENGAGEMENT;
+var CLARIFY_SYSTEM_PROMPT, REFINE_SYSTEM_PROMPT, ALLOWED_MOTIONS2, ALLOWED_CRMS2, ALLOWED_ENGAGEMENT2;
 var init_profile_clarify = __esm({
   "src/ai/profile-clarify.ts"() {
     "use strict";
@@ -24753,9 +24866,9 @@ OUTPUT FORMAT \u2014 respond with STRICT JSON only, no preamble, no markdown fen
   "engagement_tool": "outreach",
   "user_scope": "string"
 }`;
-    ALLOWED_MOTIONS = /* @__PURE__ */ new Set(["plg", "smb_velocity", "mid_market", "enterprise"]);
-    ALLOWED_CRMS = /* @__PURE__ */ new Set(["salesforce", "hubspot", "pipedrive", "other"]);
-    ALLOWED_ENGAGEMENT = /* @__PURE__ */ new Set(["outreach", "salesloft", "apollo", "none"]);
+    ALLOWED_MOTIONS2 = /* @__PURE__ */ new Set(["plg", "smb_velocity", "mid_market", "enterprise"]);
+    ALLOWED_CRMS2 = /* @__PURE__ */ new Set(["salesforce", "hubspot", "pipedrive", "other"]);
+    ALLOWED_ENGAGEMENT2 = /* @__PURE__ */ new Set(["outreach", "salesloft", "apollo", "none"]);
   }
 });
 
@@ -25014,6 +25127,155 @@ var init_profile2 = __esm({
   }
 });
 
+// src/conversation/onboard-tiers.ts
+var onboard_tiers_exports = {};
+__export(onboard_tiers_exports, {
+  ONBOARD_TIER_ORDER: () => ONBOARD_TIER_ORDER,
+  canRunDomainTier: () => canRunDomainTier,
+  clearOnboardTierFlags: () => clearOnboardTierFlags,
+  describeOnboardTier: () => describeOnboardTier,
+  getOnboardTierFlag: () => getOnboardTierFlag,
+  getOnboardTierStatus: () => getOnboardTierStatus,
+  listCompletedOnboardTier: () => listCompletedOnboardTier,
+  markDemoDataSeen: () => markDemoDataSeen,
+  markOnboardTierComplete: () => markOnboardTierComplete,
+  markProductionDataSeen: () => markProductionDataSeen,
+  pathLooksPresent: () => pathLooksPresent,
+  resetOnboardTierProgress: () => resetOnboardTierProgress,
+  resolveNextOnboardTier: () => resolveNextOnboardTier
+});
+import { existsSync as existsSync25, statSync as statSync4 } from "fs";
+function flagSet(tier) {
+  return Boolean(getConfigValue(TIER_CONFIG_KEYS[tier]));
+}
+function getOnboardTierFlag(tier) {
+  return getConfigValue(TIER_CONFIG_KEYS[tier]);
+}
+function markOnboardTierComplete(...tiers) {
+  const at = (/* @__PURE__ */ new Date()).toISOString();
+  for (const tier of tiers) {
+    if (!flagSet(tier)) setConfigValue(TIER_CONFIG_KEYS[tier], at);
+  }
+}
+function clearOnboardTierFlags(...tiers) {
+  for (const tier of tiers) {
+    deleteConfigValue(TIER_CONFIG_KEYS[tier]);
+  }
+}
+function resetOnboardTierProgress() {
+  clearOnboardTierFlags(...ONBOARD_TIER_ORDER);
+}
+function hasProductionDataset(ctx) {
+  const source = ctx?.dataset?.source;
+  if (source && !source.startsWith("demo:")) {
+    if (source.startsWith("/") || /^[A-Za-z]:[\\/]/.test(source) || source.startsWith("~")) {
+      return true;
+    }
+    if (!source.includes(":") && existsSync25(source)) return true;
+    if (source.startsWith("csv:") || source.startsWith("file:") || source.startsWith("folder:")) {
+      return true;
+    }
+  }
+  if (ctx?.attachments && ctx.attachments.length > 0) return true;
+  return flagSet("production");
+}
+function hasDemoExperience(ctx) {
+  if (flagSet("demo")) return true;
+  if (getPreferredDemoScenario()) return true;
+  const source = ctx?.dataset?.source;
+  if (source?.startsWith("demo:")) return true;
+  return false;
+}
+function listCompletedOnboardTier(ctx) {
+  const done = [];
+  const profileOk = flagSet("profile") || isProfileConfigured(loadProfile());
+  if (profileOk) done.push("profile");
+  else return done;
+  if (flagSet("domain")) done.push("domain");
+  else return done;
+  if (hasDemoExperience(ctx)) done.push("demo");
+  else return done;
+  if (hasProductionDataset(ctx) || flagSet("production")) done.push("production");
+  return done;
+}
+function resolveNextOnboardTier(ctx) {
+  const done = new Set(listCompletedOnboardTier(ctx));
+  for (const tier of ONBOARD_TIER_ORDER) {
+    if (!done.has(tier)) return tier;
+  }
+  return null;
+}
+function getOnboardTierStatus(ctx) {
+  const completed = listCompletedOnboardTier(ctx);
+  const next = resolveNextOnboardTier(ctx);
+  const meta = next ? TIER_META[next] : null;
+  return {
+    completed,
+    next,
+    nextLabel: meta?.label ?? null,
+    nextHint: meta?.hint ?? null
+  };
+}
+function describeOnboardTier(tier) {
+  return TIER_META[tier];
+}
+function canRunDomainTier() {
+  return isProfileConfigured(loadProfile()) && hasAnyLlmProvider();
+}
+function markProductionDataSeen() {
+  markOnboardTierComplete("production");
+}
+function markDemoDataSeen() {
+  markOnboardTierComplete("demo");
+}
+function pathLooksPresent(raw) {
+  try {
+    return existsSync25(raw) && (statSync4(raw).isFile() || statSync4(raw).isDirectory());
+  } catch {
+    return false;
+  }
+}
+var ONBOARD_TIER_ORDER, TIER_CONFIG_KEYS, TIER_META;
+var init_onboard_tiers = __esm({
+  "src/conversation/onboard-tiers.ts"() {
+    "use strict";
+    init_store();
+    init_profile();
+    init_repl_api();
+    init_scenario_fit();
+    ONBOARD_TIER_ORDER = [
+      "profile",
+      "domain",
+      "demo",
+      "production"
+    ];
+    TIER_CONFIG_KEYS = {
+      profile: "onboard-tier-profile",
+      domain: "onboard-tier-domain",
+      demo: "onboard-tier-demo",
+      production: "onboard-tier-production"
+    };
+    TIER_META = {
+      profile: {
+        label: "Company profile",
+        hint: "Name, industry, ICP \u2014 works without an API key"
+      },
+      domain: {
+        label: "Domain research",
+        hint: "Connect a key and let NTRP research your company"
+      },
+      demo: {
+        label: "Sample data",
+        hint: "Load a fitted demo book of business"
+      },
+      production: {
+        label: "Your data",
+        hint: "Drag-drop a CSV or folder path into the REPL"
+      }
+    };
+  }
+});
+
 // src/conversation/voice-setup.ts
 var voice_setup_exports = {};
 __export(voice_setup_exports, {
@@ -25373,97 +25635,314 @@ __export(onboard_exports, {
   profileExists: () => profileExists
 });
 import chalk25 from "chalk";
+import { existsSync as existsSync26 } from "fs";
+import { basename as basename7 } from "path";
 async function handler5(args, ctx) {
   const { flags } = parseArgs2(args, ["force", "skip-brand"]);
   const force = getBool(flags, "force");
   const skipBrand = getBool(flags, "skip-brand");
+  const tierOverride = normalizeTierFlag(getString(flags, "tier"));
   const priorProfile = loadProfile();
   const configured = isProfileConfigured(priorProfile);
   let existing = configured ? priorProfile : null;
   if (!skipBrand) printCenteredLogo();
   const session = createPromptSession(ctx.rl, ctx);
   try {
-    if (configured && !force) {
-      console.log();
-      console.log("  " + bold(`Profile already exists for ${priorProfile.company_name}.`));
-      const overwrite = await session.confirm("Overwrite this profile?", false);
-      if (!overwrite) {
-        console.log("  " + chalk25.dim("Keeping existing profile."));
-        console.log("  " + chalk25.dim("To skip prompts, type ") + paint("accent", "/onboard --force"));
-        return;
+    if (configured && !force && !tierOverride) {
+      const status = getOnboardTierStatus(ctx);
+      if (status.next === null) {
+        console.log();
+        console.log("  " + bold(`You're fully set up for ${priorProfile.company_name}.`));
+        console.log("  " + chalk25.dim("Profile \xB7 domain research \xB7 sample data \xB7 production path \u2014 done."));
+        console.log(
+          "  " + chalk25.dim("Type ") + paint("accent", "/onboard --force") + chalk25.dim(" to rebuild the profile, or drop a new CSV anytime.")
+        );
+        console.log();
+        return `Onboarding complete for ${priorProfile.company_name}`;
       }
+      if (status.next === "profile") {
+        console.log();
+        console.log("  " + bold(`Profile already exists for ${priorProfile.company_name}.`));
+        const overwrite = await session.confirm("Overwrite this profile?", false);
+        if (!overwrite) {
+          console.log("  " + chalk25.dim("Keeping existing profile."));
+          return;
+        }
+        existing = null;
+        resetOnboardTierProgress();
+      }
+    } else if (configured && force && !tierOverride) {
+      console.log();
+      console.log("  " + bold(`Rebuilding profile for ${priorProfile.company_name}.`));
       existing = null;
+      resetOnboardTierProgress();
     } else if (priorProfile && !configured) {
       console.log();
-      console.log("  " + chalk25.dim("NTRP found an incomplete profile. Setup continues."));
+      console.log("  " + chalk25.dim("NTRP found an incomplete profile. Setup continues from the start."));
       existing = null;
+      resetOnboardTierProgress();
     }
-    printIntro();
-    await ensureLlmKeys(session);
-    const siteOrName = await session.askRequired(
-      "What is the company website? Or type the company name."
-    );
-    const isUrlish = looksLikeUrl(siteOrName);
-    const companyUrl = isUrlish ? normalizeUrl(siteOrName) : void 0;
-    const seedName = isUrlish ? void 0 : siteOrName.trim();
-    const seed = {
-      ...companyUrl ? { company_url: companyUrl } : {},
-      ...seedName ? { company_name: seedName } : {}
-    };
-    let draft = await draftCompanyProfile(seed);
-    draft = await fillMissingFields(session, draft, existing);
-    const canonicalName = draft.company_name ?? seedName ?? existing?.company_name ?? "";
-    const salesMotion = draft.sales_motion ?? existing?.sales_motion ?? "mid_market";
-    const now2 = (/* @__PURE__ */ new Date()).toISOString();
-    let candidate = {
-      schema_version: 1,
-      company_name: canonicalName,
-      ...companyUrl ? { company_url: companyUrl } : existing?.company_url ? { company_url: existing.company_url } : {},
-      industry: draft.industry ?? existing?.industry ?? "",
-      product_description: draft.product_description ?? existing?.product_description ?? "",
-      target_customer: draft.target_customer ?? existing?.target_customer ?? "",
-      sales_motion: salesMotion,
-      ...draft.average_deal_size !== void 0 ? { average_deal_size: draft.average_deal_size } : {},
-      ...draft.sales_cycle_days !== void 0 ? { sales_cycle_days: draft.sales_cycle_days } : {},
-      ...draft.primary_crm !== void 0 ? { primary_crm: draft.primary_crm } : {},
-      ...draft.engagement_tool !== void 0 ? { engagement_tool: draft.engagement_tool } : {},
-      ...existing?.user_scope ? { user_scope: existing.user_scope } : {},
-      created_at: existing?.created_at ?? now2,
-      updated_at: now2
-    };
-    renderProfile(candidate);
-    candidate = await adaptiveRefine(session, candidate, ctx);
-    for (; ; ) {
-      renderProfile(candidate);
-      const action = (await session.ask("Is this profile correct? Type Y, edit, or redraft", { default: "Y" })).toLowerCase();
-      if (action === "y" || action === "yes" || action === "") break;
-      if (action === "redraft") {
-        const fresh = await fillMissingFields(session, { company_url: candidate.company_url }, null);
-        candidate = applyDraft(candidate, fresh);
-        continue;
-      }
-      if (action === "edit" || action === "e") {
-        candidate = await editLoop(session, candidate);
-        continue;
-      }
-      console.log("  " + chalk25.red(`Unknown choice: ${action}. Type Y, edit, or redraft.`));
+    const next = tierOverride ?? (force ? "profile" : resolveNextOnboardTier(ctx));
+    if (!next) {
+      console.log();
+      console.log("  " + bold("Onboarding is complete."));
+      console.log("  " + chalk25.dim("Drop a CSV or folder path into the REPL anytime to refresh data."));
+      console.log();
+      return "Onboarding complete";
+    }
+    printTierIntro(next);
+    switch (next) {
+      case "profile":
+        return await runProfileTier(session, ctx, existing);
+      case "domain":
+        return await runDomainTier(session, ctx);
+      case "demo":
+        return await runDemoTier(session, ctx);
+      case "production":
+        return await runProductionTier(session, ctx);
     }
-    saveProfile(candidate);
-    setConfigValue("sales-motion", candidate.sales_motion);
-    invalidateTaxonomy();
-    creditOnboardComplete(ctx);
+  } finally {
+    session.close();
+  }
+}
+function normalizeTierFlag(raw) {
+  if (!raw) return null;
+  const t = raw.trim().toLowerCase();
+  if (t === "profile" || t === "domain" || t === "demo" || t === "production") return t;
+  return null;
+}
+function printTierIntro(tier) {
+  const meta = describeOnboardTier(tier);
+  console.log();
+  console.log("  " + bold(`Onboard \xB7 ${meta.label}`));
+  console.log("  " + chalk25.dim(meta.hint));
+  console.log();
+}
+function printNextTierHint(ctx) {
+  const status = getOnboardTierStatus(ctx);
+  if (!status.next) {
+    console.log("  " + chalk25.dim("You're through the progressive setup ladder."));
+    return;
+  }
+  console.log(
+    "  " + chalk25.dim("Next: type ") + paint("accent", "/onboard") + chalk25.dim(` for ${status.nextLabel?.toLowerCase()} \u2014 ${status.nextHint}`)
+  );
+}
+async function runProfileTier(session, ctx, existing) {
+  console.log("  " + chalk25.dim("No API key needed for this step. Connect one later for domain research."));
+  console.log();
+  const siteOrName = await session.askRequired(
+    "What is the company website? Or type the company name."
+  );
+  const isUrlish = looksLikeUrl(siteOrName);
+  const companyUrl = isUrlish ? normalizeUrl(siteOrName) : void 0;
+  const seedName = isUrlish ? void 0 : siteOrName.trim();
+  const seed = {
+    ...companyUrl ? { company_url: companyUrl } : {},
+    ...seedName ? { company_name: seedName } : {}
+  };
+  let draft = await draftCompanyProfile(seed, ctx, { research: false });
+  draft = await fillMissingFields(session, draft, existing);
+  const canonicalName = draft.company_name ?? seedName ?? existing?.company_name ?? "";
+  const salesMotion = draft.sales_motion ?? existing?.sales_motion ?? "mid_market";
+  const now2 = (/* @__PURE__ */ new Date()).toISOString();
+  let candidate = {
+    schema_version: 1,
+    company_name: canonicalName,
+    ...companyUrl ? { company_url: companyUrl } : existing?.company_url ? { company_url: existing.company_url } : {},
+    industry: draft.industry ?? existing?.industry ?? "",
+    product_description: draft.product_description ?? existing?.product_description ?? "",
+    target_customer: draft.target_customer ?? existing?.target_customer ?? "",
+    sales_motion: salesMotion,
+    ...draft.average_deal_size !== void 0 ? { average_deal_size: draft.average_deal_size } : {},
+    ...draft.sales_cycle_days !== void 0 ? { sales_cycle_days: draft.sales_cycle_days } : {},
+    ...draft.primary_crm !== void 0 ? { primary_crm: draft.primary_crm } : {},
+    ...draft.engagement_tool !== void 0 ? { engagement_tool: draft.engagement_tool } : {},
+    ...existing?.user_scope ? { user_scope: existing.user_scope } : {},
+    created_at: existing?.created_at ?? now2,
+    updated_at: now2
+  };
+  candidate = await reviewLoop(session, candidate);
+  saveProfile(candidate);
+  setConfigValue("sales-motion", candidate.sales_motion);
+  invalidateTaxonomy();
+  creditOnboardComplete(ctx);
+  markOnboardTierComplete("profile");
+  if (hasAnyLlmProvider()) {
     console.log();
     console.log("  " + chalk25.green("\u2713") + " " + bold(`Profile saved for ${candidate.company_name}`));
-    console.log("  " + chalk25.dim(`~/.ntrp/profile.json`));
+    console.log("  " + chalk25.dim("A key is already connected \u2014 running domain research now."));
     console.log();
+    await runDomainResearchOnProfile(session, ctx, candidate);
+    markOnboardTierComplete("domain");
     await offerInboxSkillSetup(session, { beat: "production" });
-    await offerFittedDemoAfterOnboard(session, ctx, candidate);
-    const { offerVoiceSetup: offerVoiceSetup2 } = await Promise.resolve().then(() => (init_voice_setup(), voice_setup_exports));
-    await offerVoiceSetup2(ctx, session);
-    return `Profile saved for ${candidate.company_name}`;
-  } finally {
-    session.close();
+    const { offerVoiceSetup: offerVoiceSetup3 } = await Promise.resolve().then(() => (init_voice_setup(), voice_setup_exports));
+    await offerVoiceSetup3(ctx, session);
+    printNextTierHint(ctx);
+    return `Profile + domain research saved for ${candidate.company_name}`;
   }
+  console.log();
+  console.log("  " + chalk25.green("\u2713") + " " + bold(`Profile saved for ${candidate.company_name}`));
+  console.log("  " + chalk25.dim(`~/.ntrp/profile.json`));
+  console.log();
+  await offerInboxSkillSetup(session, { beat: "production" });
+  const { offerVoiceSetup: offerVoiceSetup2 } = await Promise.resolve().then(() => (init_voice_setup(), voice_setup_exports));
+  await offerVoiceSetup2(ctx, session);
+  printNextTierHint(ctx);
+  return `Profile saved for ${candidate.company_name}`;
+}
+async function runDomainTier(session, ctx) {
+  const profile = loadProfile();
+  if (!isProfileConfigured(profile) || !profile) {
+    console.log("  " + chalk25.dim("Need a company profile first \u2014 starting there."));
+    return runProfileTier(session, ctx, null);
+  }
+  await ensureLlmKeys(session);
+  if (!hasAnyLlmProvider()) {
+    console.log();
+    console.log("  " + chalk25.dim("No key connected \u2014 domain research stays locked."));
+    console.log(
+      "  " + chalk25.dim("Type ") + paint("accent", "/connect") + chalk25.dim(" then ") + paint("accent", "/onboard") + chalk25.dim(" to research ") + bold(profile.company_name) + chalk25.dim(".")
+    );
+    console.log();
+    return "Domain research skipped \u2014 no API key";
+  }
+  const updated = await runDomainResearchOnProfile(session, ctx, profile);
+  markOnboardTierComplete("domain");
+  printNextTierHint(ctx);
+  return `Domain research saved for ${updated.company_name}`;
+}
+async function runDomainResearchOnProfile(session, ctx, profile) {
+  const seed = {
+    ...profile.company_url ? { company_url: profile.company_url } : {},
+    ...profile.company_name ? { company_name: profile.company_name } : {}
+  };
+  let draft = { ...profile };
+  const spinner = makeSpinner("Researching your company\u2026");
+  try {
+    draft = await draftCompanyProfile(seed, ctx, { research: true });
+    spinner.succeed("Research draft ready");
+  } catch (err) {
+    spinner.fail("Could not research the company");
+    console.log("  " + chalk25.dim(String(err.message ?? err)));
+    console.log("  " + chalk25.dim("Falling back to your existing profile \u2014 you can edit fields below."));
+    draft = { ...profile };
+  }
+  const now2 = (/* @__PURE__ */ new Date()).toISOString();
+  let candidate = {
+    ...profile,
+    company_name: draft.company_name ?? profile.company_name,
+    ...draft.company_url || profile.company_url ? { company_url: draft.company_url ?? profile.company_url } : {},
+    industry: draft.industry ?? profile.industry,
+    product_description: draft.product_description ?? profile.product_description,
+    target_customer: draft.target_customer ?? profile.target_customer,
+    sales_motion: draft.sales_motion ?? profile.sales_motion,
+    updated_at: now2
+  };
+  if (draft.average_deal_size !== void 0) candidate.average_deal_size = draft.average_deal_size;
+  else if (profile.average_deal_size) candidate.average_deal_size = profile.average_deal_size;
+  if (draft.sales_cycle_days !== void 0) candidate.sales_cycle_days = draft.sales_cycle_days;
+  else if (profile.sales_cycle_days !== void 0) candidate.sales_cycle_days = profile.sales_cycle_days;
+  if (draft.primary_crm !== void 0) candidate.primary_crm = draft.primary_crm;
+  else if (profile.primary_crm) candidate.primary_crm = profile.primary_crm;
+  if (draft.engagement_tool !== void 0) candidate.engagement_tool = draft.engagement_tool;
+  else if (profile.engagement_tool) candidate.engagement_tool = profile.engagement_tool;
+  const filled = await fillMissingFields(session, candidate, profile);
+  candidate = {
+    ...candidate,
+    company_name: filled.company_name ?? candidate.company_name,
+    industry: filled.industry ?? candidate.industry,
+    product_description: filled.product_description ?? candidate.product_description,
+    target_customer: filled.target_customer ?? candidate.target_customer,
+    ...filled.sales_motion ? { sales_motion: filled.sales_motion } : {},
+    ...filled.average_deal_size !== void 0 ? { average_deal_size: filled.average_deal_size } : {},
+    ...filled.sales_cycle_days !== void 0 ? { sales_cycle_days: filled.sales_cycle_days } : {},
+    ...filled.primary_crm !== void 0 ? { primary_crm: filled.primary_crm } : {},
+    ...filled.engagement_tool !== void 0 ? { engagement_tool: filled.engagement_tool } : {},
+    updated_at: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  renderProfile(candidate);
+  candidate = await adaptiveRefine(session, candidate, ctx);
+  candidate = await reviewLoop(session, candidate);
+  saveProfile(candidate);
+  setConfigValue("sales-motion", candidate.sales_motion);
+  invalidateTaxonomy();
+  console.log();
+  console.log("  " + chalk25.green("\u2713") + " " + bold(`Domain research saved for ${candidate.company_name}`));
+  console.log("  " + chalk25.dim(`~/.ntrp/profile.json`));
+  console.log();
+  return candidate;
+}
+async function runDemoTier(session, ctx) {
+  const profile = loadProfile();
+  if (!isProfileConfigured(profile) || !profile) {
+    console.log("  " + chalk25.dim("Need a company profile first \u2014 starting there."));
+    return runProfileTier(session, ctx, null);
+  }
+  console.log("  " + chalk25.dim("Fit a sample book of business shaped like yours \u2014 or skip to bring your own later."));
+  console.log();
+  const loaded2 = await offerFittedDemoAfterOnboard(session, ctx, profile);
+  markDemoDataSeen();
+  if (loaded2) {
+    console.log();
+    printNextTierHint(ctx);
+    return "Demo data loaded";
+  }
+  console.log();
+  console.log("  " + chalk25.dim("Skipped sample data. Next up is your production CSV or folder."));
+  printNextTierHint(ctx);
+  return "Demo data skipped";
+}
+async function runProductionTier(session, ctx) {
+  console.log("  " + bold("Bring your own pipeline data"));
+  console.log("  " + chalk25.dim("Drag a CSV (or a folder of CSVs) onto this terminal \u2014 same as dropping a path in a shell."));
+  console.log("  " + chalk25.dim("NTRP will read the path and ingest what it can. Or type the path and press Enter."));
+  console.log();
+  const raw = await session.ask("CSV or folder path. Press Enter to skip for now", { default: "" });
+  const trimmed = raw.trim().replace(/^["']|["']$/g, "");
+  if (!trimmed) {
+    markProductionDataSeen();
+    console.log();
+    console.log(
+      "  " + chalk25.dim("Skipped. Drop a file path into the REPL anytime \u2014 NTRP will pick it up.")
+    );
+    console.log();
+    return "Production data skipped";
+  }
+  const resolved = resolveUserPath(trimmed);
+  if (!existsSync26(resolved)) {
+    console.log("  " + chalk25.red(`Path not found: ${resolved}`));
+    console.log("  " + chalk25.dim("Try again with /onboard, or drop the path into the REPL."));
+    return "Production path not found";
+  }
+  const { ingestPathFromChat: ingestPathFromChat2 } = await Promise.resolve().then(() => (init_ingest_chat(), ingest_chat_exports));
+  const ok = await ingestPathFromChat2(ctx, resolved);
+  if (ok) {
+    markProductionDataSeen();
+    printNextTierHint(ctx);
+    return `Production data loaded from ${basename7(resolved)}`;
+  }
+  console.log("  " + chalk25.dim("Nothing ingested. Drop a CSV path into the REPL when ready."));
+  return "Production ingest cancelled";
+}
+async function reviewLoop(session, initial) {
+  let candidate = initial;
+  for (; ; ) {
+    renderProfile(candidate);
+    const action = (await session.ask("Is this profile correct? Type Y, edit, or redraft", { default: "Y" })).toLowerCase();
+    if (action === "y" || action === "yes" || action === "") break;
+    if (action === "redraft") {
+      const fresh = await fillMissingFields(session, { company_url: candidate.company_url }, null);
+      candidate = applyDraft(candidate, fresh);
+      continue;
+    }
+    if (action === "edit" || action === "e") {
+      candidate = await editLoop(session, candidate);
+      continue;
+    }
+    console.log("  " + chalk25.red(`Unknown choice: ${action}. Type Y, edit, or redraft.`));
+  }
+  return candidate;
 }
 async function fillMissingFields(session, draft, existing) {
   const out = { ...draft };
@@ -25685,16 +26164,10 @@ async function editField(session, p, field) {
     }
   }
 }
-function printIntro() {
-  console.log("  " + bold("Let's set up your company profile."));
-  console.log("  " + chalk25.dim("NTRP will research your business so every answer,"));
-  console.log("  " + chalk25.dim("finding, and demo is tailored to your reality."));
-  console.log();
-}
 function printKeylessNote() {
-  console.log("  " + chalk25.dim("Skipping AI \u2014 I'll ask a few quick questions instead."));
+  console.log("  " + chalk25.dim("Skipping AI \u2014 domain research needs a key."));
   console.log(
-    "  " + chalk25.dim("Add a key anytime with ") + paint("accent", "/connect") + chalk25.dim(" to unlock research, findings, and chat answers.")
+    "  " + chalk25.dim("Add a key anytime with ") + paint("accent", "/connect") + chalk25.dim(" then type ") + paint("accent", "/onboard") + chalk25.dim(".")
   );
   console.log();
 }
@@ -25704,9 +26177,9 @@ async function ensureLlmKeys(session) {
   const { providerLabel: providerLabel2 } = await Promise.resolve().then(() => (init_providers(), providers_exports));
   const { countAvailableEngines: countAvailableEngines2 } = await Promise.resolve().then(() => (init_session_state(), session_state_exports));
   console.log();
-  console.log("  " + bold("Connect a key") + chalk25.dim(" (optional. Press Enter to skip)"));
-  console.log("  " + chalk25.dim("Scores and metrics are local math. No AI is required."));
-  console.log("  " + chalk25.dim("A key adds company research now. It also adds findings and chat answers later."));
+  console.log("  " + bold("Connect a key") + chalk25.dim(" (needed for domain research. Press Enter to skip)"));
+  console.log("  " + chalk25.dim("Scores and metrics are local math. No AI is required for vitals."));
+  console.log("  " + chalk25.dim("A key unlocks company research now, plus findings and chat answers later."));
   console.log(
     "  " + chalk25.dim("Paste any provider API key. Anthropic, OpenAI, Groq, Gemini, Mistral, and others.")
   );
@@ -25798,6 +26271,8 @@ var init_onboard = __esm({
     init_profile_clarify();
     init_profile2();
     init_inbox_setup();
+    init_onboard_tiers();
+    init_path_safety();
     SALES_MOTION_CHOICES = [
       { value: "plg", label: "PLG \u2014 Product-Led Growth", description: PRESET_DESCRIPTIONS.plg },
       { value: "smb_velocity", label: "SMB Velocity \u2014 Fast cycles, high volume", description: PRESET_DESCRIPTIONS.smb_velocity },
@@ -25838,8 +26313,8 @@ __export(new_exports, {
   handler: () => handler6
 });
 import chalk26 from "chalk";
-import { existsSync as existsSync25 } from "fs";
-import { basename as basename7 } from "path";
+import { existsSync as existsSync27 } from "fs";
+import { basename as basename8 } from "path";
 async function handler6(args, ctx) {
   const { positional, flags } = parseArgs2(args, ["demo", "empty", "list-scenarios", "regen-taxonomy"]);
   let source = null;
@@ -25860,7 +26335,7 @@ async function handler6(args, ctx) {
     console.error(chalk26.red("  Usage: /new <file.csv> | --demo [--scenario <name>] | --empty [--lens health|metrics]"));
     return;
   }
-  if (source.kind === "file" && !existsSync25(source.path)) {
+  if (source.kind === "file" && !existsSync27(source.path)) {
     console.error(chalk26.red(`  File not found: ${source.path}`));
     return;
   }
@@ -25884,7 +26359,7 @@ async function handler6(args, ctx) {
     const sourceFlag = getString(flags, "source", "s");
     if (sourceFlag) passthrough.push("--source", sourceFlag);
     await ingest(passthrough, ctx);
-    datasetLabel2 = basename7(source.path);
+    datasetLabel2 = basename8(source.path);
     datasetSource = source.path;
   } else if (source.kind === "demo") {
     const { handler: demo } = await Promise.resolve().then(() => (init_generate(), generate_exports));
@@ -26087,7 +26562,7 @@ __export(end_exports, {
   handler: () => handler7
 });
 import chalk27 from "chalk";
-import { existsSync as existsSync26 } from "fs";
+import { existsSync as existsSync28 } from "fs";
 async function handler7(args, ctx) {
   if (args.length > 0) {
     console.error(chalk27.red("  Usage: /end"));
@@ -26124,10 +26599,10 @@ async function handler7(args, ctx) {
   if (summary) {
     console.log("  " + chalk27.dim(summary));
   }
-  if (existsSync26(transcriptPathForSession(endedId))) {
+  if (existsSync28(transcriptPathForSession(endedId))) {
     console.log("  " + chalk27.dim("Transcript: ") + chalk27.dim(transcriptPathForSession(endedId)));
   }
-  if (existsSync26(contextDocPathForSession(endedId))) {
+  if (existsSync28(contextDocPathForSession(endedId))) {
     console.log("  " + chalk27.dim("Context brief: ") + chalk27.dim(contextDocPathForSession(endedId)));
   }
   console.log();
@@ -26149,7 +26624,7 @@ __export(session_exports, {
 });
 import chalk28 from "chalk";
 import { join as join23 } from "path";
-import { existsSync as existsSync27 } from "fs";
+import { existsSync as existsSync29 } from "fs";
 async function handler8(args, ctx) {
   const sub = args[0];
   if (!sub) return listSessionsView(ctx);
@@ -26295,7 +26770,7 @@ async function pickUp(idArg, ctx) {
     );
   }
   const contextPath = contextDocPathForSession(target.id);
-  if (existsSync27(contextPath)) {
+  if (existsSync29(contextPath)) {
     console.log("  " + chalk28.dim("Context brief: ") + chalk28.dim(contextPath));
   }
   console.log();
@@ -27247,7 +27722,7 @@ var init_bundle = __esm({
 
 // src/repositories/markdown.ts
 import { mkdirSync as mkdirSync16, writeFileSync as writeFileSync17 } from "fs";
-import { basename as basename8, dirname as dirname5, join as join26, resolve as resolve8 } from "path";
+import { basename as basename9, dirname as dirname5, join as join26, resolve as resolve8 } from "path";
 import { stringify as stringifyYaml2 } from "yaml";
 function renderMarkdownFiles(pkg) {
   const bundleJson = JSON.stringify(pkg, null, 2) + "\n";
@@ -27437,7 +27912,7 @@ function getRootPath(target) {
   return resolve8(target.directory ?? `ntrp-repository-${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}`);
 }
 function safeFilename(value) {
-  return (basename8(value).toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "strategy") + ".md";
+  return (basename9(value).toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "strategy") + ".md";
 }
 function escapeSummary(value) {
   return value.replace(/[<>]/g, "");
@@ -31967,7 +32442,7 @@ var init_checkout = __esm({
 });
 
 // src/services/setup.ts
-import { existsSync as existsSync28, mkdirSync as mkdirSync17, readFileSync as readFileSync20, writeFileSync as writeFileSync19 } from "fs";
+import { existsSync as existsSync30, mkdirSync as mkdirSync17, readFileSync as readFileSync20, writeFileSync as writeFileSync19 } from "fs";
 import { join as join29 } from "path";
 function setupCheck() {
   const home = ntrpHome();
@@ -33403,7 +33878,7 @@ var init_metrics = __esm({
 });
 
 // src/ai/feedback-apply.ts
-function stripFences4(text) {
+function stripFences5(text) {
   const trimmed = text.trim();
   const fenced = trimmed.match(/```(?:json)?\s*([\s\S]*?)\s*```/i);
   if (fenced) return fenced[1].trim();
@@ -33433,8 +33908,8 @@ OPERATOR FEEDBACK:
 "${feedbackText}"
 
 Apply the feedback now as STRICT JSON.`;
-  const { text } = await llmCompleteText("feedback", SYSTEM_PROMPT4, userMessage, 1024, ctx);
-  const cleaned = stripFences4(text);
+  const { text } = await llmCompleteText("feedback", SYSTEM_PROMPT5, userMessage, 1024, ctx);
+  const cleaned = stripFences5(text);
   let parsed;
   try {
     parsed = JSON.parse(cleaned);
@@ -33461,7 +33936,7 @@ function validatePatch(raw) {
   const targetCustomer = str2("target_customer");
   if (targetCustomer) out.target_customer = targetCustomer;
   const motion = str2("sales_motion")?.toLowerCase();
-  if (motion && ALLOWED_MOTIONS2.has(motion)) {
+  if (motion && ALLOWED_MOTIONS3.has(motion)) {
     out.sales_motion = motion;
   }
   const dealSize = str2("average_deal_size");
@@ -33471,25 +33946,25 @@ function validatePatch(raw) {
     out.sales_cycle_days = Math.round(cycleDays);
   }
   const crm = str2("primary_crm")?.toLowerCase();
-  if (crm && ALLOWED_CRMS2.has(crm)) out.primary_crm = crm;
+  if (crm && ALLOWED_CRMS3.has(crm)) out.primary_crm = crm;
   const engagement = str2("engagement_tool")?.toLowerCase();
-  if (engagement && ALLOWED_ENGAGEMENT2.has(engagement)) out.engagement_tool = engagement;
+  if (engagement && ALLOWED_ENGAGEMENT3.has(engagement)) out.engagement_tool = engagement;
   const userScope = str2("user_scope");
   if (userScope) out.user_scope = userScope;
   const customContext = str2("custom_context");
   if (customContext) out.custom_context = customContext;
   return out;
 }
-var ALLOWED_MOTIONS2, ALLOWED_CRMS2, ALLOWED_ENGAGEMENT2, SYSTEM_PROMPT4;
+var ALLOWED_MOTIONS3, ALLOWED_CRMS3, ALLOWED_ENGAGEMENT3, SYSTEM_PROMPT5;
 var init_feedback_apply = __esm({
   "src/ai/feedback-apply.ts"() {
     "use strict";
     init_repl_api();
     init_complete();
-    ALLOWED_MOTIONS2 = /* @__PURE__ */ new Set(["plg", "smb_velocity", "mid_market", "enterprise"]);
-    ALLOWED_CRMS2 = /* @__PURE__ */ new Set(["salesforce", "hubspot", "pipedrive", "other"]);
-    ALLOWED_ENGAGEMENT2 = /* @__PURE__ */ new Set(["outreach", "salesloft", "apollo", "none"]);
-    SYSTEM_PROMPT4 = `You are a profile-correction engine for NTRP, a GTM pipeline-health tool. The operator is giving you natural-language feedback to correct or augment their company profile.
+    ALLOWED_MOTIONS3 = /* @__PURE__ */ new Set(["plg", "smb_velocity", "mid_market", "enterprise"]);
+    ALLOWED_CRMS3 = /* @__PURE__ */ new Set(["salesforce", "hubspot", "pipedrive", "other"]);
+    ALLOWED_ENGAGEMENT3 = /* @__PURE__ */ new Set(["outreach", "salesloft", "apollo", "none"]);
+    SYSTEM_PROMPT5 = `You are a profile-correction engine for NTRP, a GTM pipeline-health tool. The operator is giving you natural-language feedback to correct or augment their company profile.
 
 YOUR JOB:
 1. Map feedback to STRUCTURED profile fields when there's a clear match (e.g. "our sales cycle is 6 months" \u2192 sales_cycle_days: 180).
@@ -33974,7 +34449,7 @@ __export(sessions_exports, {
   handler: () => handler35
 });
 import chalk62 from "chalk";
-import { existsSync as existsSync29 } from "fs";
+import { existsSync as existsSync31 } from "fs";
 async function handler35(args, _ctx) {
   const sub = args[0] ?? "list";
   if (sub === "list" || !args[0]) {
@@ -34081,12 +34556,12 @@ function showSession(idArg) {
   console.log();
   const transcriptPath = transcriptPathForSession(session.id);
   const contextPath = contextDocPathForSession(session.id);
-  if (existsSync29(transcriptPath) || existsSync29(contextPath)) {
+  if (existsSync31(transcriptPath) || existsSync31(contextPath)) {
     console.log("  " + chalk62.dim("\u2500".repeat(40)));
-    if (existsSync29(contextPath)) {
+    if (existsSync31(contextPath)) {
       console.log("  " + chalk62.dim("Context brief: ") + chalk62.dim(contextPath));
     }
-    if (existsSync29(transcriptPath)) {
+    if (existsSync31(transcriptPath)) {
       console.log("  " + chalk62.dim("Full transcript: ") + chalk62.dim(transcriptPath));
     }
     console.log();
@@ -34355,6 +34830,7 @@ var init_privacy_notice = __esm({
       "Direct identifiers (names, emails, domains, deal names) are replaced with local tokens before any LLM HTTP call.",
       "The mapping stays in ~/.ntrp/privacy/ on this machine. The CLI shows real names; the provider never does.",
       "This is pseudonymization, not anonymization \u2014 you can reverse it; the model cannot.",
+      "Exception: /onboard domain research sends the company name and website you typed so the model can draft your profile. That is operator-consented and only that step.",
       "Computed scores and dollar aggregates still go to the provider you connected.",
       "If you turn on web retrieval, named-account queries are refused. Generic GTM terms may go to Tavily or Brave.",
       "A custom --base-url receives the same tokenized payload.",
@@ -35422,20 +35898,20 @@ var init_model = __esm({
 });
 
 // src/config/update-check.ts
-import { existsSync as existsSync30, mkdirSync as mkdirSync18, readFileSync as readFileSync21, unlinkSync as unlinkSync5, writeFileSync as writeFileSync20 } from "fs";
+import { existsSync as existsSync32, mkdirSync as mkdirSync18, readFileSync as readFileSync21, unlinkSync as unlinkSync5, writeFileSync as writeFileSync20 } from "fs";
 import { join as join33 } from "path";
 function cachePath2() {
   return join33(ntrpHome(), "update-check.json");
 }
 function ensureDir7() {
   const dir = ntrpHome();
-  if (!existsSync30(dir)) {
+  if (!existsSync32(dir)) {
     mkdirSync18(dir, { recursive: true });
   }
 }
 function loadUpdateCheckCache() {
   const path = cachePath2();
-  if (!existsSync30(path)) return null;
+  if (!existsSync32(path)) return null;
   try {
     const parsed = JSON.parse(readFileSync21(path, "utf-8"));
     if (!parsed || typeof parsed !== "object" || typeof parsed.lastCheck !== "number" || typeof parsed.latestVersion !== "string") {
@@ -35456,7 +35932,7 @@ function isCacheFresh(cache2, ttlMs = CACHE_TTL_MS2) {
 }
 function invalidateUpdateCheckCache() {
   const path = cachePath2();
-  if (existsSync30(path)) {
+  if (existsSync32(path)) {
     unlinkSync5(path);
   }
 }
@@ -35470,11 +35946,11 @@ var init_update_check = __esm({
 });
 
 // src/version.ts
-import { existsSync as existsSync31, readFileSync as readFileSync22 } from "fs";
+import { existsSync as existsSync33, readFileSync as readFileSync22 } from "fs";
 import { dirname as dirname6, join as join34 } from "path";
 import { fileURLToPath } from "url";
 function readVersionFromPackageJson(packageJsonPath) {
-  if (!existsSync31(packageJsonPath)) return null;
+  if (!existsSync33(packageJsonPath)) return null;
   try {
     const pkg = JSON.parse(readFileSync22(packageJsonPath, "utf-8"));
     if (typeof pkg.version === "string" && pkg.version.length > 0) return pkg.version;
@@ -35614,7 +36090,7 @@ __export(relaunch_exports, {
   resolveRelaunchEntry: () => resolveRelaunchEntry,
   updateRestartSummary: () => updateRestartSummary
 });
-import { existsSync as existsSync32 } from "fs";
+import { existsSync as existsSync34 } from "fs";
 import { join as join35 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { spawnSync } from "child_process";
@@ -35640,7 +36116,7 @@ function npmGlobalEntry() {
   const listed = spawnSync("npm", ["root", "-g"], { encoding: "utf-8" });
   if (listed.status !== 0) return null;
   const entry = join35(listed.stdout.trim(), NPM_PACKAGE, "dist/index.js");
-  return existsSync32(entry) ? entry : null;
+  return existsSync34(entry) ? entry : null;
 }
 function thisBundleEntry() {
   return fileURLToPath2(import.meta.url);
@@ -35650,10 +36126,10 @@ function resolveRelaunchEntry(toVersion) {
     (p) => Boolean(p)
   );
   for (const entry of candidates) {
-    if (!existsSync32(entry)) continue;
+    if (!existsSync34(entry)) continue;
     if (readVersionNearEntry(entry) === toVersion) return entry;
   }
-  return candidates.find((p) => existsSync32(p)) ?? thisBundleEntry();
+  return candidates.find((p) => existsSync34(p)) ?? thisBundleEntry();
 }
 function relaunchArgv(toVersion) {
   return [resolveRelaunchEntry(toVersion)];
@@ -36176,7 +36652,7 @@ __export(exports_exports, {
   handler: () => handler48
 });
 import chalk78 from "chalk";
-import { existsSync as existsSync33 } from "fs";
+import { existsSync as existsSync35 } from "fs";
 import { join as join36 } from "path";
 function usage4() {
   console.log(chalk78.dim("  Usage:"));
@@ -36335,7 +36811,7 @@ function runMove(args, ctx) {
   }
   try {
     const destDir = resolveUserPath(dest);
-    if (!existsSync33(destDir)) {
+    if (!existsSync35(destDir)) {
     }
     const event = moveExport(idOrName, destDir);
     console.log();
@@ -36707,10 +37183,9 @@ section: Settings
 handler: ../commands/onboard.ts
 ---
 
-Start the first-run wizard. It builds a company profile.
-Connect one or two keys (Anthropic, OpenAI, or another provider).
-Then answer a few seed questions. AI drafts industry, ICP, deal size, and stack guesses.
-Optional last step: pick a folder for desktop-AI handoffs if it is not already set. Skip, and type \`/inbox set\` later \u2014 NTRP will not ask again.
+Start the progressive setup ladder. Each \`/onboard\` runs the next incomplete tier:
+profile (keyless) \u2192 domain research + API key \u2192 sample demo data \u2192 production CSV/folder path.
+Drag-drop a CSV or folder into the REPL anytime for real data.
 The profile is stored at \`~/.ntrp/profile.json\`. It flows into findings, NL answers, and demo data.`
       },
       {
@@ -37370,7 +37845,7 @@ Remaining nuances merge into a custom_context paragraph that flows into all AI s
 });
 
 // src/ai/prompt-parts.ts
-import { existsSync as existsSync34, readFileSync as readFileSync23 } from "fs";
+import { existsSync as existsSync36, readFileSync as readFileSync23 } from "fs";
 import { join as join37 } from "path";
 function buildCompanyProfileBlock() {
   const p = loadProfile();
@@ -37391,7 +37866,7 @@ function buildCompanyProfileBlock() {
 function loadAnalystFile() {
   const path = join37(ntrpHome(), ANALYST_FILE_NAME);
   try {
-    if (!existsSync34(path)) return null;
+    if (!existsSync36(path)) return null;
     const raw = sanitizeExternalText(readFileSync23(path, "utf-8").trim());
     if (!raw) return null;
     if (raw.length <= ANALYST_FILE_MAX_CHARS) return raw;
@@ -37920,39 +38395,54 @@ var ingest_chat_exports = {};
 __export(ingest_chat_exports, {
   extractFilePath: () => extractFilePath,
   ingestFromChat: () => ingestFromChat,
+  ingestPathFromChat: () => ingestPathFromChat,
   isDemoIntent: () => isDemoIntent,
+  listCsvsInFolder: () => listCsvsInFolder,
   loadDemoFromChat: () => loadDemoFromChat,
   looksLikeFilePath: () => looksLikeFilePath
 });
-import { existsSync as existsSync35 } from "fs";
-import { basename as basename9, resolve as resolve9 } from "path";
+import { existsSync as existsSync37, readdirSync as readdirSync6, statSync as statSync5 } from "fs";
+import { basename as basename10, join as join38, resolve as resolve9 } from "path";
 import { homedir as homedir8 } from "os";
 import chalk80 from "chalk";
 function extractFilePath(input) {
-  const trimmed = input.trim();
+  const trimmed = input.trim().replace(/^["']|["']$/g, "");
+  if (!trimmed) return null;
   const patterns = [
-    /^["'](.+\.csv)["']$/i,
-    /^@(.+\.csv)$/i,
-    /(?:here'?s|file|path|upload)[:\s]+["']?([^\s"']+\.csv)["']?/i,
-    /^~\/\S+\.csv$/i,
-    /^\.\.?\/\S+\.csv$/i,
-    /^\/\S+\.csv$/i,
-    /^[A-Za-z]:\\[^\s]+\.csv$/i,
-    /^[^\s]+\.csv$/i
+    /^["'](.+)["']$/i,
+    /^@(.+)$/i,
+    /(?:here'?s|file|path|upload|folder|dir)[:\s]+["']?([^\s"']+)["']?/i,
+    /^~\/\S+$/i,
+    /^\.\.?\/\S+$/i,
+    /^\/\S+$/i,
+    /^[A-Za-z]:\\[^\s]+$/i,
+    /^[^\s]+$/i
   ];
   for (const re of patterns) {
     const m = trimmed.match(re);
-    if (m?.[1]) {
-      const p = expandPath(m[1]);
-      if (existsSync35(p)) return p;
-    }
-    if (!m?.[1] && re.test(trimmed) && trimmed.toLowerCase().endsWith(".csv")) {
-      const p = expandPath(trimmed.replace(/^["']|["']$/g, ""));
-      if (existsSync35(p)) return p;
+    const candidate = (m?.[1] ?? (re.test(trimmed) ? trimmed : null))?.replace(/^["']|["']$/g, "");
+    if (!candidate) continue;
+    if (!looksLikePathToken(candidate)) continue;
+    const p = expandPath(candidate);
+    if (existsSync37(p)) {
+      try {
+        const st = statSync5(p);
+        if (st.isFile() || st.isDirectory()) return p;
+      } catch {
+      }
     }
   }
   return null;
 }
+function looksLikePathToken(token) {
+  if (token.length < 2) return false;
+  if (/^(yes|no|y|n|back|b|prev|cancel|skip|help|demo)$/i.test(token)) return false;
+  if (token.includes("/") || token.includes("\\")) return true;
+  if (token.startsWith("~")) return true;
+  if (/^[A-Za-z]:/.test(token)) return true;
+  if (/\.[A-Za-z0-9]{1,8}$/.test(token)) return true;
+  return false;
+}
 function expandPath(p) {
   if (p.startsWith("~/")) return resolve9(homedir8(), p.slice(2));
   return resolve9(p);
@@ -37960,12 +38450,79 @@ function expandPath(p) {
 function looksLikeFilePath(input) {
   return extractFilePath(input) !== null;
 }
+function listCsvsInFolder(dir) {
+  try {
+    if (!statSync5(dir).isDirectory()) return [];
+    return readdirSync6(dir).filter((name) => name.toLowerCase().endsWith(".csv")).map((name) => join38(dir, name)).sort();
+  } catch {
+    return [];
+  }
+}
+async function ingestPathFromChat(ctx, rawPath) {
+  let st;
+  try {
+    st = statSync5(rawPath);
+  } catch {
+    console.log("  " + chalk80.red(`Path not found: ${rawPath}`));
+    return false;
+  }
+  if (st.isDirectory()) {
+    const csvs = listCsvsInFolder(rawPath);
+    if (csvs.length === 0) {
+      console.log();
+      console.log("  " + paint("accent", "Folder noted") + chalk80.dim(` \u2014 ${rawPath}`));
+      console.log("  " + chalk80.dim("No CSV files one level deep. Drop a .csv path, or put exports in that folder."));
+      ctx.attachments = [
+        ...ctx.attachments ?? [],
+        { path: rawPath, ingested_at: (/* @__PURE__ */ new Date()).toISOString() }
+      ];
+      saveSessionState(ctx);
+      markProductionDataSeen();
+      return false;
+    }
+    if (csvs.length === 1) {
+      console.log("  " + chalk80.dim(`Found ${basename10(csvs[0])} in folder \u2014 ingesting.`));
+      return ingestFromChat(ctx, csvs[0]);
+    }
+    if (!ctx.rl) {
+      console.log("  " + chalk80.dim(`Found ${csvs.length} CSVs \u2014 re-run interactively to pick one.`));
+      return false;
+    }
+    const prompts = createPromptSession(ctx.rl, ctx);
+    try {
+      const picked = await prompts.choose(
+        "Which CSV in that folder?",
+        csvs.map((p) => ({ value: p, label: basename10(p), description: p })),
+        { default: csvs[0] }
+      );
+      return ingestFromChat(ctx, picked);
+    } finally {
+      prompts.close();
+    }
+  }
+  if (st.isFile()) {
+    if (!rawPath.toLowerCase().endsWith(".csv")) {
+      console.log();
+      console.log("  " + paint("accent", "Path noted") + chalk80.dim(` \u2014 ${rawPath}`));
+      console.log("  " + chalk80.dim("NTRP ingests CSV exports today. Drop a .csv from that location when ready."));
+      ctx.attachments = [
+        ...ctx.attachments ?? [],
+        { path: rawPath, ingested_at: (/* @__PURE__ */ new Date()).toISOString() }
+      ];
+      saveSessionState(ctx);
+      markProductionDataSeen();
+      return false;
+    }
+    return ingestFromChat(ctx, rawPath);
+  }
+  return false;
+}
 async function ingestFromChat(ctx, filePath) {
   if (!ctx.rl) {
     console.log("  " + chalk80.red("Ingest confirm requires interactive mode."));
     return false;
   }
-  const name = basename9(filePath);
+  const name = basename10(filePath);
   const prompts = createPromptSession(ctx.rl, ctx);
   try {
     const ok = await prompts.confirm(`Ingest ${name} as CRM export?`, true);
@@ -38024,6 +38581,7 @@ async function ingestFromChat(ctx, filePath) {
   };
   invalidateGapAudit(ctx);
   saveSessionState(ctx);
+  markProductionDataSeen();
   console.log();
   console.log("  " + paint("accent", "\u2713 Data loaded") + chalk80.dim(` \u2014 ${name}`));
   recordMessage(ctx, "user", `[ingested ${name}]`);
@@ -38099,6 +38657,7 @@ async function loadDemoFromChat(ctx, scenario, opts = {}) {
     counts,
     ingested_at: (/* @__PURE__ */ new Date()).toISOString()
   };
+  markDemoDataSeen();
   if (!ctx.scope) {
     const { proposeScopeFromIntent: proposeScopeFromIntent2 } = await Promise.resolve().then(() => (init_scope(), scope_exports));
     const proposal = proposeScopeFromIntent2("demo pipeline and metrics");
@@ -38135,6 +38694,7 @@ var init_ingest_chat = __esm({
     init_compute2();
     init_theme();
     init_demo();
+    init_onboard_tiers();
   }
 });
 
@@ -38482,7 +39042,7 @@ async function runFirstRunFork(ctx, options = {}) {
 }
 function printFirstRunChip() {
   console.log(
-    "  " + chalk82.dim("No profile yet \u2014 ask a question, type ") + chalk82.cyan("use demo data") + chalk82.dim(", or ") + paint("accent", "/onboard") + chalk82.dim(" to calibrate.")
+    "  " + chalk82.dim("No profile yet \u2014 ask a question, type ") + chalk82.cyan("use demo data") + chalk82.dim(", or ") + paint("accent", "/onboard") + chalk82.dim(" (progressive: profile \u2192 research \u2192 demo \u2192 your data).")
   );
   console.log();
 }
@@ -38564,6 +39124,8 @@ async function loadFirstRunDemo(ctx, scenario) {
     counts,
     ingested_at: (/* @__PURE__ */ new Date()).toISOString()
   };
+  const { markDemoDataSeen: markDemoDataSeen2 } = await Promise.resolve().then(() => (init_onboard_tiers(), onboard_tiers_exports));
+  markDemoDataSeen2();
   const { saveSessionState: saveSessionState2 } = await Promise.resolve().then(() => (init_context2(), context_exports));
   saveSessionState2(ctx);
   return true;
@@ -38927,7 +39489,8 @@ async function conversationRouter(input, ctx) {
   const phase = resolveConversationPhase(ctx);
   if (looksLikeFilePath(line)) {
     const path = extractFilePath(line);
-    await ingestFromChat(ctx, path);
+    const { ingestPathFromChat: ingestPathFromChat2 } = await Promise.resolve().then(() => (init_ingest_chat(), ingest_chat_exports));
+    await ingestPathFromChat2(ctx, path);
     return { handled: true, summary: "Data ingested" };
   }
   if (isDemoIntent(line)) {
@@ -39853,7 +40416,7 @@ __export(repl_exports, {
 import { createInterface as createInterface2 } from "readline/promises";
 import { clearLine as clearLine2, cursorTo as cursorTo2 } from "readline";
 import chalk88 from "chalk";
-import { join as join38 } from "path";
+import { join as join39 } from "path";
 function buildPrompt(ctx) {
   return buildConversationPrompt(ctx);
 }
@@ -40232,7 +40795,7 @@ function printHelp() {
     ["/remember <fact>", "Store a fact, a decision, or a preference"],
     ["/recall [topic]", "Show what NTRP stores about your business"],
     ["/rate good|bad <note>", "Correct the last answer. A bad note becomes a calibration"],
-    [`${join38(ntrpHome(), ANALYST_FILE_NAME)}`, "Standing operator instructions (tone, priorities, house rules)"]
+    [`${join39(ntrpHome(), ANALYST_FILE_NAME)}`, "Standing operator instructions (tone, priorities, house rules)"]
   ];
   const teachMaxW = Math.max(...teach.map(([c]) => c.length)) + 2;
   for (const [cmd, desc] of teach) {